Ok, so I'm not sure that this is entirely possible, but wanted to pose the question: would it be possible to block access to certain content when the site is accessed from a certain alternate access map?
When accessing the site internally, we should be able to see everything. However, if we access the site from outside our network via a different alternate access map, certain content under the same web application would be blocked.