[Skunkworks] web traffic authentication system

Dear Skunkers, I require a solution to authenticate remote webmasters on a web server that bypasses web application firewall deployed for the public. Reason being, I want to actively filter all sessional traffic inbound from public while I wish to let my webmasters use CMS to update their sites. Any suggestions will be highly appreciated. If you know of a possible source that can be procured, I would be happier to discuss this. Regards, Bernard