SRX5308 how to block WAN to access to my local server

Hello,

 

I have a server only used in local (ex. 192.168.1.20), connected to a switch and that switch is connected to my SRX5308 (to provide internet). I'd like to make a FW rule to block anything from the external network to have access to my server.

 

Add LAN WAN Inbound Service

Service ANY

always block

WAN destination WAN1

WAN Users: single address (192.168.1.20)

 

It's OK ? I'm not sure for the "WAN Users".

 

Thanks.