AD Authentication traffic and Domain Join

I see thanks for the reply. In option 2 how would I apply the filters to the VIP, unfortunately this is where my experience with the F5 starts to fail me.

There is only 1 vLAN for the VIPs, and then 1 vLAN for the Servers, the issue I have is that with an open Any:Any rule more traffic gets through he F5 than wanted for example we Load Balance SMTP servers.

SMTP-Server01 (Server Side vLAN) SMTP-Server02 (Servier Side vLAN)

Corp-SMTP (Client Side vLAN with a VIP)

So any applications in the company that sends SMTP traffic should point use its SMTP Server as Corp-SMTP. This is obviously works, however the issue we could get is that if people point their SMTP server to an individual server eg SMTP-Server01, because of the any:any VIP the SMTP traffic would get through and the email would send, but the traffic isnt load balanced, and if there was an issue with that server the email wouldnt send and the users would have to change the application.

Maybe I have got the comepletely wrong end of the stick here, so apologies if I am completely way off.