Hello,On the VIP object you can specify a permitted source address by
set src-filter command, example: FortiGate # sh firewall vip
FAC_SSHconfig firewall vip edit "FAC_SSH" set uuid
4fb2d328-5416-51eb-63ce-2697c2a45f2c set src-filter "192.168.15.49" ...