diff --git a/etc/kayobe/environments/overcloud-host-configure/post.d/10-debug-firewall.yml b/etc/kayobe/environments/overcloud-host-configure/post.d/10-debug-firewall.yml
new file mode 100644
index 000000000..1511836c5
--- /dev/null
+++ b/etc/kayobe/environments/overcloud-host-configure/post.d/10-debug-firewall.yml
@@ -0,0 +1,9 @@
+---
+
+- hosts: overcloud
+  gather_facts: false
+  tasks:
+    - name: Configure firewalld to log blocked traffic
+      command: firewall-cmd --set-log-denied=all
+      become: true
+