diff --git a/ansible/vars/standard.yml b/ansible/vars/standard.yml
index f153a32..37ed766 100644
--- a/ansible/vars/standard.yml
+++ b/ansible/vars/standard.yml
@@ -48,6 +48,8 @@ remote_ip_rules:
   - { direction: "ingress", protocol: "tcp", port_min: 5985, port_max: 5986, group: "domain_member", remote_ip: "10.24.4.71/32", comment: "WinRM rundeck 1"}
   - { direction: "ingress", protocol: "tcp", port_min: 5985, port_max: 5986, group: "domain_member", remote_ip: "10.24.3.172/32", comment: "WinRM rundeck 2"}
   - { direction: "ingress", protocol: "tcp", port_min: 5985, port_max: 5986, group: "domain_member", remote_ip: "10.24.3.242/32", comment: "WinRM rundeck 3"}
+  - { direction: "ingress", protocol: "tcp", port_min: 6556, port_max: 6556, group: "domain_member", remote_ip: "10.24.1.150/32", comment: "CheckMK Agent"}
+  # create groups with no rules add default egress here???
 
 
 # ONLY PROTECTED FOR PROXY SSH and http[s]