Novell BorderManager 3.9 provides various parameters through which you can restrict access to internal networks.
Add a traffic rule on the top of the deny rule to encrypt the traffic only to those internal networks to which traffic has to be allowed.