Access citrix by portal access

I don't know if you're still having issues with the implementation, RobinBreggeman - but there is a 3rd alternative that may work. On your original portal page (with links to other apps), you can add a Remote Desktop resource of type Citrix. Configure as this remote desktop's destination your Citrix XML broker (Desktop Delivery Controller) address:port. Then, when your users click on this icon on your portal page, they will be presented with a APM-provided Storefront/Web Interface replacement UI for logging on to the broker and displaying icons for launching the Citrix apps/desktops the broker returns as available in your environment. (You can also configure SSO, depending on how users log on to your portal, such that the broker-returned app/desktop icons are immediately displayed, if preferred, skipping the logon-to-Citrix dialog).

What is happening in this scenario is that APM is "decorating" the ICA files returned to the Receiver client to add an SSL Proxy configuration, pointing at your APM portal page as the proxy. The Receiver client then sends Common Gateway Protocol traffic via the SSL tunnel thus constructed, and the F5 proxies those calls to the back-end session host on port :2598.

Just an alternative. (Btw, I was being quick and dirty -- there are cleanups to the above, e.g., if you have redundant brokers, you should configure an LTM pool to the brokers, and select that pool as the destination, rather than an individual broker.)