IPSec Firewall rules not configured via tunnel interface

[janw.zc]

Hi everybody,

I already searched the forum but didn't find any info:

I have a IPSec-Tunnel which works properly but behaves wrong in my opinion.
I have an "IPSec" interface (seems to be a general one) and one interface for every tunnel, named e.g. "Azure".
Now when I want to allow traffic from the remote network, it's useless to configure it under the tunnels name (e.g. Azure) but it needs to be configured under the general IPSec-Interface.
Did I configure it wrong? Because usually I'd like to configure rules seperated by the tunnel interface.

Thanks in advance,

Jan