RDP persistence with SNAT

Hi,

rather than using an RDS broker service, is there a simpler way to persist and equally load balance traffic to an RDP vip which is a resource on APM?

Our setup is:

client connects to APM

On APM there is a webtop using native RDP which points at the IP address of an  LTM VIP on the same F5. 

LTM vip sees the F5 SNAT IP, I cannot pass any cookie, header, or even custom rdp parameter from APM to the LTM vip so there is no way to persist on anything unique.

LTM cannot see the username, apparently if even a blank apm profile is bound to the LTM vip I can see things like sso username, however if I enabled apm then the vip makes ssl profile mandatory which then breaks rdp.

Any other ways to do this or is it impossible?