Global Protect- Is access based on services/ports possible?

Hi all,

When setting up Global Protect client VPN, is it possible to set up in such a way that the endpoint only has access to certain devices based on port number?

Or will the endpoint have access to all devices in the subnet?