Restricting Access by IP to different web application

We're using a HA pair of ASM-4100 devices to secure a web application. We have a good policy for outside users that restricts access to general areas. However we also have internal staff that need a...