This message was deleted.

What's the purpose of this web/content filtering?

Yes, to prevent access to certain sites, whether that be due to their relevancy to business or because they have malware etc

Ivanti workspace control web sites security can do that for you. Per app , per user. In or out going

Palo does it pretty well, although there were security concerns around its per user stuff a while back

obligatory plug for Citrix SIA which should be able to to that as well through the RDSH-specific connector https://www.citrix.com/products/citrix-secure-internet-access/

Sonicwall should be able to do this as well

My personal stance is that if a site is acceptable for one user to access from Citrix, then it should be fine for any others, but regardless of what I think there is a desire to filter based on user ID/group, and I think at least from a tracking perspective, there is some validity to determining which user on a server accessed a site for troubleshooting purposes.

we use sonicwall content filtering, does a good job, agent is required for rdsh, but not vdi for whatever reason. the agent is a super small install, nothing really. i think it just some basic authentication to their directory connector.

@Neal Dolson using Ivanti Workspace Control to manage this on a Xenapp machine for specific groups, ports, processes is easy (see screencap). To bad it's not a separate security module, it only comes with all the other great features that you most likely already cover with another EUC product.

also Bitdefender has a filtering feature, not sure if it works on a per user base