+1   Here we use vpn.domain.com for desktops with hostcheck and vpn.domain.com/ipad with no hostcheck (cause mobile devices don't support it) so we use browser restrictions on the /ipad url so desktop don't try and sneak in that route.   ... View more