Portal Access Security Problem - Manipulation with HEX string in URL mangle allows access to any internal website!! How to restrict?

Hi, We are running simple Portal Access policy on our APM, which provides authenticated external users an access to our public web site located behind the APM, basically a simple reverse proxy with...