APM Step up auth on Network Access

We want to do Step-up authentication when a user is allowed and selects Network Access. Is this possible? Seems Per-Request policies are not really meant for this purpose.