Symptoms
When using SSL Virtual Private Network (VPN) mode with Access Gateway with "Require SSL Client Certificate" enabled, it is possible to request client certificates at SSL session initialization. However, when using Access Gateway with Secure Gateway mode with "Require SSL Client Certificate" enabled, the user fails to establish a SSL session.
Cause
This was not an issue prior to ICA client version 9.x, because client certificate functionality was not implemented in previous versions of the client. Connections requiring client certificates are not supported in all versions of Secure Gateway including Access Gateway in Secure Gateway mode.
Resolution
The issue is specific to Secure Gateway mode and this function works with SSL VPN mode.
See page 140 of CTX107804 - Access Gateway Administrator's Guide 4.2.
