Zimbra- IP restricted user authentication

Our zimbra server runs behind the firewall. The webui can be accessed from our office IPs only. We want to give access to some users from any location and remaining should be able to login only from the office ip. We do understand that Zimbra does not have such inbuilt feature. Therefore, your suggestions are invited and then the job will be allocated if the proposal appear to be technicall feasible.