Allow SSL VPN (Remote Access) User portal (And other Sophos ACL Services) for specif user

So most users using the remote access vpn.

My thought was now, create new ssl vpn profile and give seperate "vpn zone", and allow under Administration>Device Access the Userportal.

But no, you cant.

Is there anyway to make this happen for single user? Or do i just simple make firewall rule from vpn to some gateway with port HTTPS?

Or what is the best practice for some backup admin interface? Or can you put a specif user if he connect inside a local net?

Edited TAGs
[edited by: emmosophos at 7:11 PM (GMT -8) on 30 Nov 2022]