If WAN is public / internet connection it is highly discouraged to open it up for WebGUI access. Just asking for trouble. If it is a must have then additional filtering measures are a must. Even then still very much discouraged.
Many people use one of the VPN services to access the LAN. And there by have access to the WebGUI via the LAN side. I use OpenVPN service.