After offloading SSL from SharePoint to NetScaler and applying the AppExpert template, some of the menu options in SharePoint are missing. You also receive a JavaScript "Access Denied" error.

For this particular issue and Mixed-Content warnings you are not required to configure any policies or rules on a NetScaler appliance.
You will need to Remove all the Alternate Access Mapping (AAM) including the Internet zone from the SharePoint server and configure as below.

Create the following two internal mappings:

Problem Cause

The SharePoint applications use JavaScript to run AJAX through HTTP (XMLHttpRequest). When SSL is configured on a NetScaler appliance, the appliance rejects the JavaScript because it considers the script as a cross-site script.