2 Way SSL for one pool only

Consider that TLS functions below layer 7 (application layer) in the OSI model, so by the time you have access to a URI value (ex. "/company-online-app"), you've already completed the TLS handshake. You can, however, trigger a TLS renegotiation with client cert request quite simply with APM (Access Policy Manager). Otherwise, you can set Client Authentication in the client SSL profile to request, which will prompt, but still let users in if they don't present a certificate.