Use VMware Horizon View’s tagging feature to identify external / internal pools.

Use VMware App Volumes.

Use ThinApp to stream the applications.

Use VMware User Environment Manager to define network subnets that will filter the lists of external / internal desktop pools based on the user’s client ip address.

Use VMware NSX and deploy micro-segmentation rules that will filter the lists of external / internal desktop pools based on the user’s client ip address.

Use Horizon Security Server.