How to restrict GUI access to single interface?

I created firewall rule allowing access to web GUI through “Management” interface.

I disabled the anti-lockout rule. I changed GUI listen interface to Management only.

Why can I still access the GUI with the Management cable unplugged?