diff --git a/values/system/hel1/network/allow-itpartner-mail-egress.yaml b/values/system/hel1/network/allow-itpartner-mail-egress.yaml
new file mode 100644
index 00000000..31390197
--- /dev/null
+++ b/values/system/hel1/network/allow-itpartner-mail-egress.yaml
@@ -0,0 +1,17 @@
+{{- if .Values.clusterConfig.cilium.enabled }}
+apiVersion: cilium.io/v2
+kind: CiliumClusterwideNetworkPolicy
+metadata:
+  name: allow-itpartner-mail-egress
+spec:
+  endpointSelector: {}
+  egress:
+  - toFQDNs:
+    - matchName: mx.itpartner.no
+    toPorts:
+    - ports:
+      - port: "587"
+        protocol: TCP
+      - port: "465"
+        protocol: TCP
+{{- end }}