I'd like to put the 2X Web Gateway out in my DMZ, but I want to restrict which of my users have permission to log in to 2X from the web gateway versus those who connect directly from the client inside the LAN. Any creative ways of doing this? Any straightforward ones?