Which Cisco AnyConnect component ensures that devices in a specific internal subnet are only accessible using port 443?

Which Cisco AnyConnect component ensures that devices in a specific internal subnet are only accessible using port 443?
A. routing
B. WebACL
C. split tunnel
D. VPN filter