F5 APM - SMTPS virtual server

How can i allow SMTP and SMTPS on the same port (25)? As soon as i give the virtual server an SSL Profile i can't connect SMTP with telnet anymore. 

I dont think that will work on the same port.

Same problem to use APM policy (I want to filter clients subnet), as soon as i assign 
an http policy (needed to be able to assign an Access Profile) i can't access the SMTP anymore.

To keep it easy you could just use an irule and a datagroup to filter the subnets.

Something like:

when CLIENT_ACCEPTED {
    if { not[class match [IP::client_addr] equals DATAGROUPNAME] } {
        log local0. "[IP::client_addr]:[TCP::client_port]: Rejecting client IP"
        reject
    } 
}