FFSO AD and Citrix

Has anyone coma across this.

We gave set up the AD Agent reporting to a collector then on to the Fortigate for authentication of users to the Internet. This works a treat.

We also have  a Citrix environment the FSSO TS Agent has been installed and is reporting to the same collector. I can see usernames in the list. I can see the usernames from the Citrix Server in the list of FSSO users on the Gateway. But when trying to get to the Internet it is missing out the authentication rule in the firewall.

The rule works for access from PCs . Where the Source address is all and the Source users is a group.

But we are not being filtered by that rule.

Hope this makes sense.

Any ideas.

Thanks

David