about pfsense ipsec machine access

[torefloo]

In pfsense, after connecting the two pfsense to the central branch with IPSec, can I write a rule that only 1 in the center can access IP, Not others, the writing center network 192.168.1.0 network, branch network 192.168.2.0 one server in branch only 192.168.1.3 ' It will not be able to access any other device on the network that can access the sql files contained in it. Thank you ...