This message was deleted.

Check out deviceTRUST integration with FSLogix App Masking.

You could setup VMware DEM to perform an Application Block based on endpoint IP address range i.e. if it doesn't match an internal range then it applies. You might want to layer a few conditions to ensure its only applies externally.

With netscaler end point analysis, smart access, you can check for user’s ip address and allow or deny apps to the user. I’ve never tried it… https://support.citrix.com/article/CTX227055 https://www.citrix.com/content/dam/citrix/en_us/documents/guide/demo-guide-for-smart-access-smart-control.pdf

Thanks guys, will have a look at this