diff --git a/ansible/vars/protected.yml b/ansible/vars/protected.yml
index 513c9f3..532d455 100644
--- a/ansible/vars/protected.yml
+++ b/ansible/vars/protected.yml
@@ -60,10 +60,12 @@ remote_group_rules:
   - { direction: "egress", protocol: "tcp", port_min: 80, port_max: 80, group: "domain_member", remote_group: "chocolatey_server", comment: "Chocolatey HTTP"}
   - { direction: "egress", protocol: "tcp", port_min: 443, port_max: 443, group: "domain_member", remote_group: "chocolatey_server", comment: "Chocolatey HTTPS"}
   - { direction: "egress", protocol: "tcp", port_min: 3128, port_max: 3128, group: "user_vms", remote_group: "proxy", comment: "HTTP proxy"}
+  - { direction: "egress", protocol: "tcp", port_min: 8530, port_max: 8531, group: "domain_member", remote_group: "wsus_server", comment: "WSUS Client"}
 
   - { direction: "ingress", protocol: "tcp", port_min: 3128, port_max: 3128, group: "proxy", remote_group: "user_vms", comment: "HTTP proxy"}
 
 
+
 remote_ip_rules:
 # User VMs
   - { direction: "ingress", protocol: "tcp", port_min: 3389, port_max: 3389, group: "user_vms", remote_ip: "0.0.0.0/0", comment: "RDP"}