Client Authentication - Trusted Certificate Authority

my first instinct here would be to use and irule and the virtual command. These kinds of change in behavior mid flow on a single virtual has caused problems for me in the past.

Basically - SubVirtual1 would be set up with no Auth - SubVirtual2 would be set up with only Auth.

The make VIP using the address in DNS for www.mysiteABC.com would have an irule that would look something like this

when HTTP_Request {
    if { [string toupper [HTTP::url]] starts_with "DEFG") {
        virtual SubVirtual1
    } else {
        virtual SubVirtual2
    }
}