I have RD Web and RD gateway configured, used internally on the LAN, and accessible from the internet. I would like to have a different idle timeout for internal users versus external users. For example, a user connecting from the internet has a 10 minute idle timer, and a user connecting from the LAN (private IP address) would get a 2 hour idle timer. It seems the best way to have two different idle timeouts is via two different collections, but how do I hide the collection based on the client's IP? I've looked at the different policies and I'm not seeing anything that would filter the collections based on IP, rather than username/usergroup or computer name. Is there any way to accomplish this?

Thanks in ad