block access to VS by IP

You should look for the host header and action for this.

when HTTP_REQUEST {
if {not(([string tolower [HTTP::host]]) equals "www.xyz.com")} {
log local0. "[HTTP::host] requested Invalid - Dropped"
reject
}
}