Select 'Automatic packet filter rules' and Astaro will build the routes and rules only for the hosts and networks listed in 'Local networks'. If you put 'Any', then all of the VPN user's traffic will go through the tunnel. If you put 'Internal (Network)' then the user will have a "split tunnel" - only traffic for 'Internal (Network)' will go through the tunnel. If you just put the host definition for a single server, then that's all that will be available to the user.
Select 'Automatic packet filter rules' and Astaro will build the routes and rules only for the hosts and networks listed in 'Local networks'. If you put 'Any', then all of the VPN user's traffic will go through the tunnel. If you put 'Internal (Network)' then the user will have a "split tunnel" - only traffic for 'Internal (Network)' will go through the tunnel. If you just put the host definition for a single server, then that's all that will be available to the user.