irule for different services same domain name on GTM

If site one is both vips, you don't want them identified by GTM as different resources, do you? GTM only hands out an address, not an address:port combination, so you can only affect one decision. My suggestion would be that if SSL is a required piece of your application to consider it "UP", then only add those virtuals, but tie the monitoring of the LTM 443 virtual to also monitor port 80 on the same resource so the 443 virtual will only report healthy if both ports are up.