I think this is the same as before. I have the user portal enabled, Allowed networks "Internal & VPN". The advanced page has listen "Any / 443".
When I try to connect from outside, I get a "not allowed" web error rather then the port not listening at all. My preference is to hide everything.
Is there something I can do better?