diff --git a/puppet/services/congress.yaml b/puppet/services/congress.yaml
index 89c9f36536..f8b8bec852 100644
--- a/puppet/services/congress.yaml
+++ b/puppet/services/congress.yaml
@@ -132,7 +132,11 @@ outputs:
           - '%'
           - {get_param: [EndpointMap, MysqlInternal, host_nobrackets]}
         congress::policy::policies: {get_param: CongressPolicies}
-
+        tripleo.congress.firewall_rules:
+          '113 congress':
+            dport:
+              - 1789
+              - 13789
       service_config_settings:
         keystone:
           congress::keystone::auth::tenant: 'service'