TLS is not activated on monitored host

CheckMK runs behind NAT firewall and can not be reached by monitored host. How to register TLS? Im my case TLS is not needed, as internet is not involved. Can I instead ignore the warning without disable “Check_MK Agent” completely?