The problem is, unless I'm misunderstanding something, even Instant Guard requires the "Enable Web Access From WAN" option to be turned on: https://www.asus.com/support/FAQ/1044340
I'd love a simple tutorial on setting up a VPN so that I can manage the parental controls on my RT-AX86U from...