Hello,
Try adding WAN interface in RS485 configuration window, in "Allow IP" field leave it empty (mean everything) save it and see if you will be able to access rs485 modbus remotely via IPsec.
Also, you can add second LAN interface to RS485 configuration.