Hi,
you have one option with realizing it with two public ip-adresses.
IP 1: VMware View 443, 4172, 8443
IP2: VMware Horizon Workspace 443
To implement this you need an gateway or firewall appliance which can deal with this. We used Microsofts ForeFront Threat Management Gateway Server 2010 and also publish Microsoft Exchange 2013 OWA, OA, OAS, OAB and a handfull of SharePoint 2013 Sites.
You also have to implement the Horizon Workspace FQDN with Split-DNS. FQDN "workspace.company.com" for internal access with internal ip-adress (172.16.xxx.xxx) and FQDN e.g "workspace.company.com" with external public ip-adress (xxx,xxx,xxx,xxx) and DNS. All internal Clients use your internal ip-adress to connect with Workspace and all external devices with resolve your FQDN with external public ip-adress and use this to connect with workspace.