VPN Access question

Hey Folks

New to Peplink here

Could not find a VPN category so I hope I am in the right place !

I have a question :

If I create an ACL to restrict an outside IP address , When they attempt to log in via the VPN what happens first ?

Do they get denied or are they able to attempt to log in before the ACL is recognized ?

I would think that the VPN would not allow them access but no idea with Pep Link due to the first one we have installed .

Not even sure if this is the correct way to restrict an IP address either …

I created an ACL to restrict wan access to a certain public IP Address network and may have to do a few more now that I can see getting hit by a few subnets etc. if this truly works !