diff --git a/ansible/vars/checkmk.yml b/ansible/vars/checkmk.yml
index 9c3bd94..ea77a37 100644
--- a/ansible/vars/checkmk.yml
+++ b/ansible/vars/checkmk.yml
@@ -1,4 +1,4 @@
-checkmk_server: 10.24.1.150
+checkmk_server: 10.24.2.152
 checkmk_agent_server: "{{ checkmk_server }}"
 checkmk_agent_site: openstack
 checkmk_agent_registration_site: "{{ checkmk_agent_site }}"
diff --git a/ansible/vars/protected.yml b/ansible/vars/protected.yml
index 9fb67f1..87501f5 100644
--- a/ansible/vars/protected.yml
+++ b/ansible/vars/protected.yml
@@ -66,7 +66,7 @@ remote_ip_rules:
 
 # All Winwdows VMs
   - { direction: "ingress", protocol: "tcp", port_min: 5985, port_max: 5986, group: "domain_member", remote_ip: "10.24.3.242/32", comment: "WinRM rundeck 3"}
-  - { direction: "ingress", protocol: "tcp", port_min: 6556, port_max: 6556, group: "domain_member", remote_ip: "10.24.1.150/32", comment: "CheckMK Agent"}
+  - { direction: "ingress", protocol: "tcp", port_min: 6556, port_max: 6556, group: "domain_member", remote_ip: "10.24.2.152/32", comment: "CheckMK Agent"}
   - { direction: "egress", protocol: "tcp", port_min: 80, port_max: 80, group: "domain_member", remote_ip: "169.254.169.254", comment: "Openstack metadata"}
   - { direction: "egress", protocol: "udp", port_min: 67, port_max: 67, group: "domain_member", remote_ip: "0.0.0.0/0", comment: "DHCP"}
   - { direction: "egress", protocol: "tcp", port_min: 1688, port_max: 1688, group: "domain_member", remote_ip: "172.16.26.19/32", comment: "Windows Activation"}
diff --git a/ansible/vars/standard.yml b/ansible/vars/standard.yml
index 4df5dff..31df5c1 100644
--- a/ansible/vars/standard.yml
+++ b/ansible/vars/standard.yml
@@ -47,7 +47,7 @@ remote_ip_rules:
   - { direction: "ingress", protocol: "tcp", port_min: 5985, port_max: 5986, group: "domain_member", remote_ip: "10.24.4.71/32", comment: "WinRM rundeck 1"}
   - { direction: "ingress", protocol: "tcp", port_min: 5985, port_max: 5986, group: "domain_member", remote_ip: "10.24.3.172/32", comment: "WinRM rundeck 2"}
   - { direction: "ingress", protocol: "tcp", port_min: 5985, port_max: 5986, group: "domain_member", remote_ip: "10.24.3.242/32", comment: "WinRM rundeck 3"}
-  - { direction: "ingress", protocol: "tcp", port_min: 6556, port_max: 6556, group: "domain_member", remote_ip: "10.24.1.150/32", comment: "CheckMK Agent"}
+  - { direction: "ingress", protocol: "tcp", port_min: 6556, port_max: 6556, group: "domain_member", remote_ip: "10.24.2.152/32", comment: "CheckMK Agent"}
   # create groups with no rules add default egress here???