SSL VPN seems to prevent you from using Citrix Hot Keys - stuff like CRTL+F1 to lock your session or change your password or Shift+F2 to switch from full screen to Windowed. This is an issue because it makes it difficult for users to do things like change their password on the Windows domain (Citrix hosted on Windows Server 200X boxes in this case).
So the scenario is that users connect via the SSL VPN and then click a Citrix bookmark to open a terminal session. This is an SA2500 build 6.3R2
you can try to publish the ICA file through the IVE for the specific citrix application ,
my users enjoy the simplicity of it :-)
my 2 cents..