How I filter in FMC which IPs are allowed to speak with intf outside

[AminRamadan]

I have an FTD managed by FMC. The FTD has a remote access VPN configuration. The problem is that any IP can communicate with the outside interface over DTLS/TLS port 443.

How can I filter which IPs are allowed to use DTLS/TLS with the outside interface?

[Rob Ingram]

@AminRamadan yes, you can use a control plane ACL, you must use flexconfig. Example:

https://integratingit.wordpress.com/2021/06/26/ftd-control-plane-acl/