To make it work, simply consume the "VerifyIncomingNetwork" Client Action in the OnApplicationReady module of the reactive modules, enabling internal access only, and configure the "ValidNetworkIpsGammas" Site Property with the same IP ranges defined in the VPNs in Lifetime. If there are individual IPs that you want to allow access, simply separate them with commas in the "SingleAllowedIPs" Site Property.