You need to ensure that the new policy applies only to connection requests from the 192.168.0.0/24 subnet
You need to configure replica downstream servers to send Server1 summary information about the computer update status