I just made a test :
in fact the the ADMIN SERVER is accessible via WAN IP only from within LAN,
the ADMIN SERVER is not accessible from outside.
So there's no problem at all,
but it's just a bit confusing to type Wan Ip in the browser and get admin...
You might think everybody could try to login to your m0nowall...