Prevent web-management to be accessible from outside

Hi All,

I faced a bit confusing situation and could not find answer in Internet.

I'd like to disable web-management on External interface reth0.1 so I have got the following config: 

set system services web-management https interface vlan.1 ; internal interface

set security zones security-zone untrust screen untrust-screen
set security zones security-zone untrust host-inbound-traffic system-services traceroute
set security zones security-zone untrust host-inbound-traffic system-services ping
set security zones security-zone untrust host-inbound-traffic system-services ike
set security zones security-zone untrust host-inbound-traffic system-services https ; for Dynamic-VPN
set security zones security-zone untrust interfaces reth1.0

 The question is how to disable web-management on reth0.1 and have dynamic-VPN at the same time.

And I can still access Web UI from outside.

Thank you for help in advance.

Regards,

Slava