Using F5 11.6.0 Hotfix HF6 6.0.442 with the latest iApp to proxy ICA traffic via StoreFront 2.6. Using the same FQDN internally and externally.
Web based access works fine but Citrix Receiver access does not work externally.
I have found that the problem is that when connecting externally something is altering the beacons (which are configured correctly in StoreFront) supplied to the Receiver to put the FQDN in both the internal and external beacons. So the client ends up with two internal beacons - one pointing to the StoreFront configured beacon which isn't accessible on the Internet and one pointing to the FQDN which is, of course, accessible on the Internet. Because Receiver can contact this one "internal" beacon it results in the Receiver thinking that it is on the internal network and so it fails to create the connection.
Internal access with Receiver is fine and if I only use internal access the beacons are as per those configured in StoreFront. It is only once I have created a connection through the F5 that the beacons get altered.
Personally, I prefer removing Storefront and using F5 APM only, it's a more easy way to integrate Citrix and it works fine. When I need to identify internal and external published apps, I use Citrix Smart Filters.
I am not positive beacons are supported, but I would open a case to get a definitive answer from support.
Has anyone figured out a way to make single FQDNs work without replacing the storefronts with the F5?