I should have spelled out more caveats related to the citrix configuration ... it only worked when using the old Citrix Secure Gateway (CSG). CSG isn't supported by citrix any more, so this has turned out to be not as good of an option as I had hoped. When using a newer (supported) version of the citrix Web interface, we are able to make the proxy configuration work from windows (I think because there is a juniper client that loads in windows prior to executing the citrix connection). However, from ipad, it tries to connect to the internal address of the citrix server ... without CSG in the mix, it's not connecting. So - I'm back to looking for alternatives because we don't want to maintain CSG without support.
... View more