I am trying to set up the GCP Firewall. My internal network is set up as a class A. We are working to rectify that but in the meantime, I am having trouble figuring out how I can allow our internal class A addresses without opening the firewall up for external too. I have a classic VPN set up from our internal network to GCP.