diff --git a/RHEL-Server-9.sh b/RHEL-Server-9.sh
index e50f44f..b3d5c90 100644
--- a/RHEL-Server-9.sh
+++ b/RHEL-Server-9.sh
@@ -42,6 +42,7 @@ sudo systemctl restart chronyd
 
 sudo firewall-cmd --permanent --remove-service=cockpit
 sudo firewall-cmd --reload
+sudo firewall-cmd --lockdown-on
 
 # Harden SSH
 mkdir -p /etc/ssh/ssh_config.d /etc/ssh/sshd_config.d