I think you should be able to achieve what you want with a few steps:   Set external DNS to resolve "inside.company.com" to the external IP address of your PCS appliance. Create a new Role for access to this resource. Under Role -> General -> UI Options, set the custom start page URL to be the URL of your internal web server. Create a new realm for access to this resource Create a role mapping policy for the realm which maps all users to your newly created role Under Authentication -> Signing In -> Sign-In Policies, create a new Sign-In URL of "inside.company.com" Map this new Sign-in URL to your newly created Realm You should hopefully find that any external users who browse to inside.company.com are presented with a PCS login page.  After logging in, they should be taken directly to your inside.company.com web server through the web re-writer. ... View more