Question to see if this is possible: Lets say I have a URL which internally resolves to 10.10.10.7 and externally is 9.8.7.6 https://some.site.com/ Then I have another URL https://some.site.com/en/p/<random characters>/preview https://some.site.com/fr/p/<random characters>/preview Is it possible for when a user accesses, https://some.site.com/ it requires a username and password (LDAP), if it resolves externally BUT if it resolves internally, it just lets it thru. On top of that, it https://some.site.com/en/p/<random characters>/preview is accessed it does NOT require a username or password.

With 2 VIPs, 1 internal and 1 external with AAA you should be able to do what you want. Maybe you'll need a CS VIP so you can exclude AAA for some URLs.

A bunch of CS Policies/Actions and LB vServers, some with auth and some without, sure.