You will need to make three Addresses. The first is UDP 137.

Make two more FQDN Addresses for the A2U services.

Make a new Firewall Rule to allow the A2U VPN traffic, and make another rule below that one to block all other VPNs

You will need to make three Addresses. The first is UDP 137.
Make two more FQDN Addresses for the A2U services.
Make a new Firewall Rule to allow the A2U VPN traffic, and make another rule below that one to block all other VPNs