Layered ASM for APM login page protection

Has anyone successfully implemented 

https://my.f5.com/manage/s/article/K000149701

Full VPN clinets stop working after this implementation. 

I can see below errors

Client machines interface IPs are not falling under a private subnet or exception subnet ranges provided by the APM server

The connected network is vulnerable of tunnel crack as LocalIP falls under the public IPs