diff --git a/group_vars/all.yml.sample b/group_vars/all.yml.sample
index d80ac21c2..738efeed5 100644
--- a/group_vars/all.yml.sample
+++ b/group_vars/all.yml.sample
@@ -59,7 +59,7 @@ dummy:
 # If configure_firewall is true, then ansible will try to configure the
 # appropriate firewalling rules so that Ceph daemons can communicate
 # with each others.
-#configure_firewall: False
+#configure_firewall: True
 
 # Open ports on corresponding nodes if firewall is installed on it
 #ceph_mon_firewall_zone: public
diff --git a/group_vars/rhcs.yml.sample b/group_vars/rhcs.yml.sample
index 68b69ed40..b9cac0d62 100644
--- a/group_vars/rhcs.yml.sample
+++ b/group_vars/rhcs.yml.sample
@@ -59,7 +59,7 @@ fetch_directory: ~/ceph-ansible-keys
 # If configure_firewall is true, then ansible will try to configure the
 # appropriate firewalling rules so that Ceph daemons can communicate
 # with each others.
-#configure_firewall: False
+#configure_firewall: True
 
 # Open ports on corresponding nodes if firewall is installed on it
 #ceph_mon_firewall_zone: public
diff --git a/roles/ceph-defaults/defaults/main.yml b/roles/ceph-defaults/defaults/main.yml
index 7277a0171..917b86877 100644
--- a/roles/ceph-defaults/defaults/main.yml
+++ b/roles/ceph-defaults/defaults/main.yml
@@ -51,7 +51,7 @@ mgr_group_name: mgrs
 # If configure_firewall is true, then ansible will try to configure the
 # appropriate firewalling rules so that Ceph daemons can communicate
 # with each others.
-configure_firewall: False
+configure_firewall: True
 
 # Open ports on corresponding nodes if firewall is installed on it
 ceph_mon_firewall_zone: public