The following error is displayed on Citrix XenMobile Apps:
"Connection failed due to a security policy"

Complete the following steps to troubleshoot this issue:

1. Remove the affected device from XenMobile and then re-enroll the device.
2. If SSL offload is configured on NetScaler then ensure that XenMobile also has SSL offload configured.
3. Ensure to enter FQDN/instance in the server address field when enrolling. If you just enter FQDN, then enrollment fails.
4. If you have configured load balancing then ensure that the load balancing cluster can communicate with each other.
5. Ensure that the device on which the issue manifests is authorized on XenMobile.
6. Ensure that all intermediate certificates for the root certificate are installed on the XenMobile server.
7. Ensure that SSL offload is configured correctly. For more information refer to CTX200063 - XenMobile 9.0 MDM SSL Offload Configuration.
8. Ensure that you are not using private and untrusted SSL certificates. Only public certificates are supported.
9. If you are using Citrix Secure Hub 10.2 then upgrade to 10.3.
10. If you are using ​NetScaler 10.1 with XenMobile, then ensure that you are using one of the enhancement builds. Only NetScaler 10.1 enhancement builds are supported with XenMobile.