APM Network Access, Application Access, ACL

I want to verify a configuration that I am creating.

1. RDP to various PC's through Application Access
2. Network Access to multiple subnets
3. ACLs that would limit Network Access subnets in 2 to ssh to specific hosts that are NOT related to RDP computers in 1.

Example:

RDP-PC 1 is 192.168.1.50

Network Access is 172.18.12.0/24

ACL limits to 172.18.12.112/32 for ssh only.

Is this the best way to do this? Does APM recognize this, or will the ACLs block my RDP since it is neither the Network Access nor ssh?

Thanks, Ryan