OK, I see the 'Transparent mode skiplist' doesn't apply because you have authentication, and therefore your users' browsers are all pointing at port 8080 directly.

It appears that there's a timeout since packets are taking a minute or longer. Try creating an Exception with all boxes selected for the Citrix servers. If that doesn't work, then maybe there's a port that needs to be allowed; is anything blocked in the packet filter log?

Cheers - Bob

__________________
ACE V7 - Astaro Preferred Partner since V3
Addicted to my iPhone!