diff --git a/rules/falco-incubating_rules.yaml b/rules/falco-incubating_rules.yaml
index cd0e9658..2d3771f1 100644
--- a/rules/falco-incubating_rules.yaml
+++ b/rules/falco-incubating_rules.yaml
@@ -734,7 +734,7 @@
   items: [0, 9, 80, 3306]
 
 - list: expected_udp_ports
-  items: [53, openvpn_udp_ports, l2tp_udp_ports, statsd_ports, ntp_ports, test_connect_ports]
+  items: [53, 443, 88, openvpn_udp_ports, l2tp_udp_ports, statsd_ports, ntp_ports, test_connect_ports]
 
 - macro: expected_udp_traffic
   condition: fd.port in (expected_udp_ports)