Sharepoint Subsites

At a minimum I think you'd want to do something like this:

when ACCESS_ACL_ALLOWED {
    if { not ( [HTTP::uri] starts_with "/my-subsite-1" ) } {
        HTTP::redirect "https://[HTTP::host]/my-subsite-1"
    }
}

This should ensure that the user is redirected to the correct subsite AFTER the access policy is completed.