if you want to treat different clients in different ways, you might need to consider having different IP NAT pools for each "region". It's a little difficult to suggest, without knowing a lot more about your network, and why it is setup the way you have.
And, there are a lot of things to consider.
If you have DPs scattered around the world, with a VPN PoP near some DPs, then your VPN solution might need some re-configuration, to direct the initiating client to a particular NAT pool, and you could create a suitable CM boundary for that IP range of
that NAT pool.
Don
(Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)
