Block URI from Internet

Thanks for the info! Maybe I can just block the URI from the Internet as suggested above and then create an Internal DNS entry that would point the Inernal user directly to the Internal VIP? Then could we add a single subnet to the list of allowed users?