Policy-in-policy question

[piaakit1210]

Hi All, 

           I have a question, if i create below local in policy, will it restrict our user to connect VPN from remote network or any internet impact ? this policy is only prevent internet traffic from being able to get to your management services, correct ? Thanks 

> config firewall local-in-policy
> edit 100
> set intf “wan1”
> set srcaddr “all”
> set dstaddr “all”
> set service “ALL”
> set schedule “always”
> set action deny
> next
> end

Piaakit  

[Toshi_Esumi]

Why is "set match-vip enable" not available on local-in policies while available on regular policies? Is it too difficult to implement or already has a plan in the near future? I would assume the DEV side has been realizing if it's needed in policies, it's also needed in local-in policies.

Toshi