Is there a way to achieve such restriction of the UI ?
This can be done with a firewall, there’s no option in Pritunl to control access to specific IP addresses. Some connection modes including connection single sign-on, dynamic firewall and device authentication require the web server to be available before being connected.