Global protect to restrict certain source IP

[YuWeiLau]

Can Global protect restrict or only allow certain external public IPs from accessing the VPN? 

[reaper]

yes, but this is accomplished by creating a security policy

you'll need to set up a security rule that allows only your preferred sources/blocks undesirable locations, with destination IP set to your firewall external IP (or the IP used in your GP portal/gateway if different), applications ssl and ipsec and either application-default ports, or custom ports if you changed the default ports in your GP configuration