We didn't have STAS in 2013, Joseph, so what they were expecting never worked - that's why I was confused by what they were asking. Now, if you install STAS in your Windows server(s), you should be able to make firewall rules based on, for example, "Joseph (User Network)."
I don't know if this capability has been extended to "{Backend Group} (User Group Network)" - please let us know if you try that.
Cheers - Bob