Referring to the exhibit, you want to block HTTP access to Web-Server from the subnet where Mai-User is located. All other traffic should be permitted.
Which firewall filter configuration do you use?