App Protection question - is it possible to have a...
# citrix-vadl
langsbr
09/25/2024, 2:09 PMApp Protection question - is it possible to have a specific Store ignore the AppProtection flag?
Example:
Storefornt with 2 stores
internal - ignore App Protection setting, allow HTML use
External - enforce App Protection, force workspace app use
Right now, if I enable App Protecton on a Delivery Group, if I have a store that has not been configured with the webreceiverservice to have Appprotection enabled, the icon doesn't show at all. Once I enable it, the icon shows if AppProtection requirement is met. Is it possible to have the store show the icon regardless and function as if App Protection is not enabled?
r
RSRevord
09/26/2024, 9:03 PMeasiest is override the app protection flags in the default.ica on that store
RSRevord
09/26/2024, 9:04 PMi imagine your thinking store A has app protection B doesn't and divert users based on a group to each depending on needs/wants?
l
langsbr
09/27/2024, 1:35 PMThe default ica override seems like it would be great. We have some stores that are internet exposed and would need app protection enabled, but other stores that are internal only and wouldn't need it. That seems much easier than contextual based smartaccess filters and broker access policy rules that I was trying to setup. I will test the default ica method in dev! Thanks
r
RSRevord
09/27/2024, 2:02 PMpro's cons
RSRevord
09/27/2024, 2:02 PMif you can i'd simply to a link that only internal users get vs external and all external get app protection via the default.ica
RSRevord
09/27/2024, 2:03 PMalso if you do this look at enabling the protocol handler for store web so ica is opened in memory so they can't edit and take the app protection flags out
l
langsbr
10/04/2024, 12:43 PMI have it working with contextual based app protection right now. Its a bit more obtuse since you can't enable App Protection on the Delivery Group, but have to use a brokeraccesspolicyrule with a smartaccess filter so you don't see anything about app protection in the GUI, but it does give more granular control this way.
r
RSRevord
10/04/2024, 1:07 PMif you have that working and your happy with it its a good way as well.
RSRevord
10/04/2024, 6:29 PMthats more if you want to use the same store for multiple gateway names but only 1 gateway do app protection so guess its all about what your flow where your trying to solve
RSRevord
10/04/2024, 6:29 PMwhat i wish they did better was selective by group targeting
RSRevord
10/04/2024, 6:29 PMwe simply do internal off, external access on so for us ew went diff stores
RSRevord
10/04/2024, 6:29 PMbut other factors come to play