Adding an ASM policy to an APM VIP used for Citrix access

Hey I used the iapp 2.4 to create an access policy for Citrix users years ago.  I'm being asked now to add a security policy to this VIP.  I created a front end landing VIP using the article below and I can log in through the APM, hit the storefront and see my published desktops and apps.  When I launch the VDI i get the window to pop up but it never connects.  Has anyone done this or know of possible issues I could be having?  I get the .ica file downloaded but when I open it is when I get the timeout.

https://my.f5.com/manage/s/article/K54217479