diff --git a/ansible/group_vars/all/inspector b/ansible/group_vars/all/inspector
index 55e63e8be..7ea902da7 100644
--- a/ansible/group_vars/all/inspector
+++ b/ansible/group_vars/all/inspector
@@ -15,7 +15,7 @@ inspector_ipa_ramdisk_upstream_url: "{{ ipa_ramdisk_upstream_url }}"
 # Ironic inspector processing configuration.
 
 # Whether inspector should manage the firewall.
-inspector_manage_firewall: False
+inspector_manage_firewall: True
 
 # List of of default inspector processing plugins.
 inspector_processing_hooks_default:
diff --git a/doc/source/release-notes.rst b/doc/source/release-notes.rst
index d5c36ad42..d3a450587 100644
--- a/doc/source/release-notes.rst
+++ b/doc/source/release-notes.rst
@@ -2,6 +2,17 @@
 Release Notes
 =============
 
+In Development
+==============
+
+Upgrade Notes
+-------------
+
+* Modifies the default value for ``inspector_manage_firewall`` from ``False``
+  to ``True``.  Management of the firewall by ironic inspector is important to
+  ensure that DHCP offers are not made to nodes during provisioning by
+  inspector's DHCP server.
+
 Kayobe 3.0.0
 ============