Setting up WAF

Is this an internal website? You could create a FW rule to only allow access if the source is the VPN subnet.

Is this an internal website? You could create a FW rule to only allow access if the source is the VPN subnet.

No it's an external website. I just want to lock the access unless the user is connected to the SSL VPN that I have provided to them. Waf is set up and it works no problem but it's open to the world... 

when i remove the Any IPv4 and leave the Remote SSL VPN Subnet which is the IP range when my vpn connects, the website will not work. I've tried this under 

it's same... maybe i am thinking wrong. But What I wanted to do is that to allow users to be able to access this website only if they are connected to their VPN.

thanks

anyone?

I wish I could provide more input. I do not have a UTM to verify this with...

ooopps i posted in wrong place. I am not using utm. I am using XG... I shall move this