That should be ok; there should be no error with that.
For checking the Java access, you will want to enable client-side logging for Java applets in addition to the dsrecord to see what is happening.
I have just tried to setup XenDesktop and have got the same error message. I've had nothing but problems with all these new features on SSLVPN (Junos Pulse is just as bad IMO). Anyone managed to get it working yet?
We had integration working great with XenDesktop4 on 7.1 - we upgraded to XD5 and it broke. Opened a case with Juniper, they do not officially support XD5 yet.