Do they hit the same VIP? ICA would hit your gateway and non-ICA your SF, do I miss something? Otherwise there is prob something in the header to differentiate it. It doesn't seem really standard to do this and it would prob be taxing on your CPU to do this.