Certificate Authentication on IPAD

I just configured the SSL client profile to ignore cert and only kept the APM VPE cert check. I got "access denied" page on my IPAD. logs below

2014-06-27 12:51:58 Received User-Agent header: Mozilla%2f5.0%20(iPad%3b%20CPU%20OS%207_1_1%20like%20Mac%20OS%20X)%20AppleWebKit%2f537.51.2%20(KHTML%2c%20like%20Gecko)%20Version%2f7.0%20Mobile%2f11D201%20Safari%2f9537.53. 2014-06-27 12:51:58 Received client info - Type: Safari Version: 1 Platform: iOS CPU: unknown UI Mode: Mobile Smart Phone Javascript Support: 1 ActiveX Support: 0 Plugin Support: 0 2014-06-27 12:51:58 New session from client IP 208.185.x.x (ST=New Jersey/CC=US/C=NA) at VIP 10.16.20.50 Listener /Common/xxxx_KABOxxx (Reputation=Unknown) 2014-06-27 12:51:58 Following rule 'fallback' from item 'Client Cert Inspection' to ending 'Deny' 2014-06-27 12:51:58 Access policy result: Logon_Deny 2014-06-27 12:51:59 \N: Session deleted due to user logout request.