External access while retaining internal access, possibly to different portals

Seeking guidance on providing external (Internet) access while retaining internal (intranet) access to the same system.  Available documentation suggests configuring Virtual Addressing on a Web Profile to provide external access, but that appears to override internal access.  Is there a way to provide external access to one Portal and internal access to a different Portal?  Cannot find definite instructions on how to set this up.