object-group network vpnlantraffic_src_net
 Any 

object-group network vpnlantraffic_dst_net
 Any 

object-group service vpnlantraffic_svc
ip

ip access-list extended vpnlantraffic_acl
permit object-group vpnlantraffic_svc object-group vpnlantraffic_src_net object-group vpnlantraffic_dst_net

class-map type inspect match-all vpnlantraffic

match access-group name vpnlantraffic_acl

policy-map type inspect VPN-LAN-POLICY
class type inspect vpnlantraffic
inspect
class class-default
drop log

zone-pair security VPN-LAN source VPN destination LAN
service-policy type inspect VPN-LAN-POLICY
   
