how to authenticate traffic to a URI on an ASM web service

folks

 

i have a web service on an asm vserver and i wish to protect individual URIs with an authentication process, for example, traffic to /PATH1/* or /PATH2/* must be authenticated but traffic to /PATH3/* or even /* is allowed through

 

i'm trying to restrict access to the test part of site

 

has anyone done this or can you recommend a best practice

 

i have APM licence available on the box too in case that's needed

 

thanks