Citrix Device Posture works with DaaS via Smart Access via device posture tags. Device Posture does not send tags to CVAD (or CVAD can't understand them). Regardless, SmartAccess via Device Posture is not a feature for CVAD, correct? We can use Device Posture to block, allow at a high level but not provide contextual access to CVAD.

For CVAD onPremise you can use EPA with Netscaler for similar capabilities or now you can use deviceTrust for more granular and dynamic contextual control even when session is running.