There were problems with the SSL/VPN after upgrading from 6.0r3 to 6.0r4.2.1 where the user would visit a site with Active X components and it would not load the component. Changing the Web Caching policy for the affected site to "Unchanged" seemed to do the trick.
1. goto "Resource Policies" -> "Web" -> "Caching"
2. create a new policy for the affected website, in this case it was "foosite*:80,443/*"
3. action "Unchanged (do not add/modify caching headers)"
(note: 6.0r4.2.1 was a maintenance release the support people allowed out to fix a Citrix problem)
