Since you are going to be hosting an intranet site on the same machine as the other sites, then you need to allow only the LAN to view the site and no one else. Something like:
deny from all
allow from <ip/subnet>
Not too sure if you can do this in the Vhost directive block. But if you can't, then specify the location of your intranet site with the Location directive and try it in there.