check if browser's cookies are enabled

That's a good start. If you used two pages you could have one set the cookie and then other allow access if the client presents the cookie(s) or send a redirect/HTTP response for clients who don't have a cookie. And by "pages" it could just be two different HTML responses sent from the iRule.

 

 

Aaron