Is there any feature that allows an "EPA" like feature for Citrix CVAD policies? allow clipboard if machine is domain joined versus allow clipboard if machine starts with WSS* or if machine IP is 10.33.. or user is part of global group

Device Posture can do a can then you can apply policies based on the results https://docs.citrix.com/en-us/device-posture.html. If tis all onprem then you need epa and soon you can look at deviceTrust

DeviceTRUST would do this today, but i recall with dynamic Citrix policies there were some limits on how/when they take place - would need a refresher

Yea I meant soon from a licensing perspective

Yah I know - Dyn Citrix policies were just a bit of a mash when I played last time - might be better now

🙂 im not sure yet all new to me

Device Posture is so much nicer than EPA from an admin standpoint - particularly with this policy awareness - EPA makes me want to hide under a rock

looks awesome especially the continuous pretection aspect

Revised; using internal storefront, i want to block clipboard if endpoint machine is not domain joined; Customer is DaaS but using On-Prem Storefront. Device Posture could help in the future?

not too many options there. You could use client ip or client name if that would separate your use cases. Otherwise you would need to add a netscaler to tell fi the endpoint is domain joined or not.

exactly what i thought; filtering by client IP or client endpoint name is easily manipulated by placing a machine with same endpoint naming construct on the LAN. DeviceTrust might be a solution next year...

yep