Security issue - Oracle Identity System Administration login screen is exposed to public

here's a couple of log lines to hopefully help. logs will go to /var/log/ltm or the Local Traffic tab in the Logs section of the GUI

when HTTP_REQUEST {
 
if { [string tolower [HTTP::uri]] starts_with "/sysadmin/faces/signin"}{
	log local0. "URI is [HTTP::uri] - IP Address is [IP::client_addr]"
 
	if {not [IP::addr [IP::client_addr] equals 10.0.40.0/24]} {
		log local0. "Dropping the connection from [IP::client_addr]"
		drop
		}
	}
}