Satellite server content filtering by Connection-Specific DNS Suffix

We have devices On-prem and different VPN solutions, Aruba, Cisco Secure Connect, and zScaler (ZPA). Being able to filter based on Connection-Specific DNS Suffix will allow proper flow of content based on connectivity type.