Hi,

The Rule should look like that:
from elmec
to ANY
Service ANY
DROP

and should be put directly AFTER your rule. To be 100% sure move your rule to the TOP (Rule 1) and the DROP rule after that (Rule 2).

If this works, then there probably is a rule in your rulebase that allows acces to your internal network for the whole SSLVPN-address-pool.

Kind Regards,

Matthias