I have one physical interface (X0) on my sonicwall NSA 3600 with 4 different virtual interfaces (X0:V120, X0:V121, X0:V130, X0:V140) for the different SSID's broadcasted.

I Would like Vlan X0:v140 to only have access to a single website (pupil platform).

I've created an adress group which contains all the IP-adresses that server uses.

[![enter image description here](https://i.stack.imgur.com/GXHm0.png)](https://i.stack.imgur.com/GXHm0.png)

When I create an access rule to allow outgoing traffic or an access rule to block outgoing traffic there is no problem, all traffic passes or is blocked, but when I create an access rule to allow traffic to the specific ip-adresses of the pupils platform all traffic is blocked, even the website which shouldn't be.

[![enter image description here](https://i.stack.imgur.com/2mvAZ.png)](https://i.stack.imgur.com/2mvAZ.png)

Is it possible to help me out to overcome this problem?

Thanks a million!

Korneel Vanloocke