I am having an issue getting Citix clients to connect via VPN. This is a new turn up, I had a PIX 501 yesterday morning and everything was fine but 18 devices and only 10 licenses, so I had CAL issues and dropped this in as a "quick fix". I can ping anything on the other side of the VPN tunnel, connect to intranet pages, RDp to severs but no ICA connection. netstat -an showns it its talking to Citrix Server via 2598 (session reliability) but then times out while "negotiating capabilties". I would think this is a Citrix issue but it works with the PIX but not the 1760. Any input would be appreciated! I'm running out of ideas... Attached is my config.
