Separating APM traffic from LTM traffic

I need a little guidance on how I should deploy APM in our environment.

 

 

Having Firepass and the LTM in separate environments today, I'm trying to figure out what to do now they they reside on the same box.

 

 

Our LTM always pointed traffic to the DMZ burb or zone, while Firepass always sent traffic to a special VPN zone.

 

 

How would I do this with APM? As long as I could lock down traffic sourcing from APM to one IP and LTM traffic to another I think that would be fine.

 

 

I hope that this makes sense,

 

 

Thanks,

 

 

Misty