A. Create an inline layer where the destination is the target network resource Define sub-rules allowing only specific sources to access the target resource

B. Use a "New Legacy User at Location", specifying the LDAP user group that the users belong to, at the desired location

C. Create a rule allowing only specific source IP addresses access to the target network resource.

D. Create an Access Role object, with specific users or user groups specified, and specific networks defined Use this access role as the "Source" of an Access Control rule