I just purchased the router yesterday after reading some good reviews of the AX50.

There are a few incoming ports that have to be forwarded to specific devices. That works fine, but I want to restrict those ports to allow access only from a specific external server / IP address. Is that possible?

That seems like a pretty simple, obvious security requirement.