Connecting to Citrix servers behind a site-to-site VPN is one of the few places we've used the transparent mode skiplist.

If that can't solve your problem, please show relevant lines from the 'Content Filter (HTTP)' log.

Cheers - Bob

__________________
ACE V7 - Astaro Preferred Partner since V3
Addicted to my iPhone!