Tutorial: How to Isolate Access Server's Web Services⁠

1. Sign in to the Admin Web UI.

2. Select Configuration → Network Settings.

3. Under Web Service forwarding settings, set the admin and client web servers to No.

4. Set the Admin Web UI Interface and IP Address to the localhost.

5. Select Save Settings and Update Running Server.

Now you can set your firewall to only allow ports TCP 443 and UDP 1194, the default ports for the OpenVPN daemons.

Access Server should still be able to establish OpenVPN tunnel connections, but the web interfaces are unreachable.