diff --git a/tenants/demo/00-namespace-quota-netpol.yaml b/tenants/demo/00-namespace-quota-netpol.yaml
index 58b5e74..d9c4738 100644
--- a/tenants/demo/00-namespace-quota-netpol.yaml
+++ b/tenants/demo/00-namespace-quota-netpol.yaml
@@ -62,3 +62,9 @@ spec:
       ports:
         - { protocol: UDP, port: 53 }
         - { protocol: TCP, port: 53 }
+    - to:                                        # HTTPS externo IPv4 (Garmin: diauth/apis/connect)
+        - ipBlock: { cidr: 0.0.0.0/0, except: [ 10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16 ] }
+      ports: [ { protocol: TCP, port: 443 } ]
+    - to:                                        # HTTPS externo IPv6
+        - ipBlock: { cidr: "::/0", except: [ "fe80::/10", "fc00::/7" ] }
+      ports: [ { protocol: TCP, port: 443 } ]