Is it possible to exclude a group of users from se...
# citrix-vadm
Mike Streetz (O_P)
04/02/2024, 4:43 PMIs it possible to exclude a group of users from seeing an app when coming through a gateway while still allowing it to be seen for other groups? Can SmartAccess filters combined with Exclusion filters / Access Policies do this, and if so how do you chain them together?
đź‘€ 1
s
Shane Swacus
04/02/2024, 9:43 PMwould using the block list on the dg help?
m
Mike Streetz (O_P)
04/02/2024, 9:51 PMnot in this case as they still want to allow internal access for that group
Mike Streetz (O_P)
04/02/2024, 9:51 PMso it needs to be block but only if coming through the gateway
Mike Streetz (O_P)
04/02/2024, 9:52 PMand I don’t know how to add that granularity to the “don’t allow sessions tagged with a gateway” rule
Mike Streetz (O_P)
04/02/2024, 9:52 PMlike can you chain rules together?
s
Steven Lemonier
04/03/2024, 9:34 AMYes you can:
Use Get-BrokerAccessPolicyRule -Name "YourDG*" (keep the * at the end)
It always list two rules per DG, one called "_Direct" and one called "_AG"
From there, you can use Set-BrokerAccessPolicyRule -Name "NameofthePolicy_AG" -AddExcludedUsers "yourgroup"
Then the user from the group won't see the app through the gateway but other users will still do.
thankyou 1
m
Mike Streetz (O_P)
04/03/2024, 3:45 PMawesome, that’s what I was looking for
6 Views