So i am looking for native support not the Java client. Is it being worked on? I am very intersted in the iPad version of the client as we are thinking about buying Citrix Access gateway to support a remote desktop option and i constantly have to come up with excuses on why Juniper does not support this feature.
the problem we have with l3 tunnel is the ipads are are not FIPS 140-2 compliant. So we cant allow users to store anything on the ipads but if we give them L3 access we cant stop them for doing this so we kinda need to limit what the users can do so if they are working on a citrix or rdp type portal than nothing gets saved locally and we are good to go
It is because Citrix is highly-protective of their intellectual property and refuses to allow 3rd party companies like Juniper to develop ICA proxy functionality. Otherwise we would have done it already. Citrix does offer a partner alliance but automatically denies entry to any of their competitors.
We are investigating options on how to handle the proxy'ing of ICA traffic on iOS-based devices, but today ZanyTerp is correct that you will need to establish a Layer 3 VPN session via Junos Pulse prior to connecting to your Citrix XenApp/XenDesktop environment.
Unfortunately, today, the ONLY official solution on the market that is capable of supporting this without a Layer 3 VPN tunnel is Citrix.
The Citrix Receiver client solution contains a proxy in the client that works in conjunction with the proxy that operates on the Citrix Access Gateway. It is not the CAG that is doing 100% of the "heavy lifting" in terms of proxying the ICA traffic, so keep that part in mind as well.