how do i allow only certain ips in zero trust tunneling ?

hi ,
i've setup a tunnel and make sure it worked .

i would like to restrict ips - countries from accessing the tunnel domain.
so not all the world can access it .

i tried to setup a in gateway >firewall section
to allow only certain country , however when i try with a different country via vpn to test it out i still can access my domain and webpage .