Limited (User Network) -> Any -> {desired machine} : Allow Limited (User Network) -> Any -> Any : Drop VPN Pool (SSL) -> Any -> Any : Allow