World of EUC

I see a secure access client / EPA client high sev vulnerability has dropped. GUI method is really easy now to update the Secure access client / EPA client via the .tgz which gets distributed to the user if not installed

So silly question... we don't use these clients but they're bundled with CWA. should endpoints with these installed be updated?

Yeah I did notice secure access client and epa client was included in latest CWA versions. I had to exclude it from the install using the command line params. I would presume it would need to be updated if bundled with CWA

this is my command line that excludes EPA client and Secure access client CitrixWorkspaceFullInstaller.exe ADDLOCAL=ReceiverInside,ICA_Client,USB,DesktopViewer,AM,SSON,SelfService,WebHelper InstallEPAClient=N /silent /CleanInstall /noreboot  /includeSSON ENABLE_SSON=Yes

As Matt said, there aren't that much customers using SSLVPN / EPA with NetScaler - but there's a pretty much higher amount of just default CWA installations, where CSA and EPA comes with, so they are vulnerable :confused:

i dont know why they was included in the CWA install tbh. I presume the push for the use of secure private access