You will need to make three Addresses. The first is UDP 137.

Make two more FQDN Addresses for the A2U services.

Make a new Firewall Rule to allow the A2U VPN traffic, and make another rule below that one to block all other VPNs