Tunnel Mode Only. Block access to Web Mode Completely?

Hey everyone, I normally use IPsec tunnels for site to site, also for remote access, VPNs. It's just always been my preference for some reason.

I have setup an SSL VPN Portal now, but have only enabled tunnel mode. 

Under SSL-VPN Settings I only have one portal mapping to the said portal above.

But anyone from outside is still able to load the portal for login. Name / Password / Login via the https://publicip:portiset i don't ever intend to use web mode, only tunnel. Is there a way to make this inaccessible? Otherwise I'm tempted to just go back to IPsec.

I just simply prefer not to have a public facing login to my device. FG-501E. v5.6.11

Cheers, 

Ollie