diff --git a/cli/documentation/en_US/controller/firewall-tcp b/cli/documentation/en_US/controller/firewall-tcp
new file mode 100755
index 0000000..0c09a8d
--- /dev/null
+++ b/cli/documentation/en_US/controller/firewall-tcp
@@ -0,0 +1,2 @@
+By selecting the 'tcp' keyword, the matched ip protocol is tcp.  A port number
+must be included for this selection.