Does it include Chrome Enterprise for UHMC I wonder? Or is that still just CPL.\

ah , good point

@Adam but your confirmation isn't public, correct? It's very confusing - some Citrix Sales Engineers are posting on socials, it's including browser apps with SPA (which has to be Chrome Enterprise, because Citrix Enterprise Browser (CEB) is EoL?!)

I was curious about how CEB being EoL factored into this as well.

my info came from emails between myself and our partner and our partner and Citrix. Perhaps there was a miscommunication.

Licensing Models - Citrix Here you'll find "Citrix Secure Access with Chrome Enterprise" is part of platform license where as "Citrix Secure Private Access" is also part of UHMC now.

"Citrix Secure Access with Chrome Enterprise" is a separate line item though in the Platform entry.

Secure Private Access in UHMC is limited to ZTNA Tunneling or Agentless access to web applications, no web or saas controls. You can still use Chrome (managed via GPO/other means) or non-chrome browsers such as Edge to tunnel the traffic to web or SaaS apps.. So basically customers can use everything that SPA provides (cloud and hybrid deployment) except the Chrome Enterprise Premium (CEP) integration and CEP itself which needs platform licensing

"...or non-chrome browsers such as Edge to tunnel the traffic to web or SaaS apps" - how will my local installed, non managed, MS Edge tunnel the web-traffic? There's the need for the CSA client to be installed and connected for such that web-traffic, too? With the old Citrix Enterprise Browser, for Web / SaaS-Access, there was no need for CSA. Thank you

For HTTP/HTTPS apps, as long as you select Allow/Allow on the policy, vs Allow access with restrictions, you can access SPA apps on client native browser (from a user experience pov, it's like ACVPN on a cloud gateway). CSA will come into play if it's configured as a TCP/UDP app, but also may be pulled in if the above mentioned web app has session pol/routing rules configured like a web app with printing enabled. Note about the above policies... in my experience the wizard that builds these rules area you better get it right, and you can't edit it, deal. eg. If you initially select "Allow with Restrictions", and then select something like "Clipboard disabled", that will force them to use CEB/Chrome Enterprise. If you later decide you want to allow the users to use Native Browser, you can't just uncheck the box and select "Allow Access". Instead you must delete the policy and create a new policy as desired.

Thanks for the details, Jon