site to site remote connections initialization

Hello,

once when I was testing new fortigate I've try cisco-fortigate site to site vpn. I have seen option 'block remote initialization' (ore similar name) - Now when I finally managed to install it inplace of an old UTM I can't find it anymore (tunnel template is set to custom). Where can I find it ?

FortiOs v 5.6.1 (was 5.6.0 when conducting tests).

I want to block i.e. network scans, remote desktop, VNC, and such initialized from remote office. Is there any other way?