Webtop with Citrix links and Portal links

One issue is the Citrix iApp has internal irules which will run every time and you might not want them to run for your portal access. What about instead of portal access links, use a weblink to another portal access vip on the box? If you use a multi-domain cookie, you can access it without having to log in, but you do need an extra ip / hostname. Otherwise I'd try disabling irule events whenever you get a portal request, make sure the serverssl profile is the same as your working case, and packet capture the backend to see if any packets are leaving and what's happening to them.