diff --git a/tasks/security.yml b/tasks/security.yml
index 68d0c25..03ae0d2 100644
--- a/tasks/security.yml
+++ b/tasks/security.yml
@@ -38,6 +38,7 @@
   systemd:
     name: firewalld
     enabled: true
+    state: started
 
 - name: Define firewall ports
   set_fact:
@@ -64,5 +65,5 @@
     permanent: true
     immediate: true
     state: disabled
-  when: item not in requested_firewall_ports
+  when: item and item not in requested_firewall_ports
   loop: "{{ firewall_ports.stdout.split(' ') }}"