How to restrict the dial-in IP only on WAN IP for remote access users

[Huaming]

Hi, I have a question about the remote access on checkpoint 5400. The function works well. but I found internal users in all subnets can access remote-access VPN by dial-in their subnet gateway in this firewall. Can I restrict the remote access function only on WAN interface, at other ports, it can't dial in. 

Thanks for your help in advance. 

[G_W_Albrecht · Accepted solution]

Try GW object > VPN clients > Remote Access > Support Visitor Mode > Machine´s Interface

[Huaming]

THanks for your kindly help.