Using Active Directory Goups for IPSec Connect Client VPN

Hello Community,

we use Sophos IPSec VPN with Active Directory authentication.

All our VPN-Users are member of the Active Directory group "AAIC-VPN". We can use this group in fw rules:

But we can not use this rule in the vpn settings:

I have to add the users manual to the vpn access users. Do you have a idea how i can only use the Active Directory "AAIC-VPN" group in this section? We dont wont to ad new users every time in the firewall. We wish to do this only in the Active Directory group...

I dont understand why it works in fw-rules but not in the ipsec settings.

Thank you in advance!