This message was deleted.

I think that app is what turned me gray.

a colleague of mine worked with their technical folks and they determined it just wouldn't work well in non persistent environments, can't remember exactly why. Wanted to see if that has changed at all.

It brought down our whole production Citrix farm within 30 min of cybersec implementing it. And even when months later it was finally working ok it would often decide to interfere with something and blow up sessions. Our cybersec team ultimately canned it - it was causing too many issues outside Citrix as well.

@Dave Brett I seem to recall you were using this....

Not in a while but when I did it was a pain...

Pulled it out of a persistent environment as it caused way too many issues.

We tested it and ended up going with Sentinal One, because it just works better with Citrix.. persistent and non persistent.

We are using this - however it is soon to be ripped out. Can get some config details but it's a resource hog for sure.

It's like someone looked at applocker and thought "how can i make this worse".

0 positive experiences with it, ouch!

On the positive side, it has a cool name.

Funny you mention the name. They changed the name of the software to CB Protect. Didn't wash the stink off.

CB Protect? They have nothing going for them now.

I have a customer using it for a non-persistent View environment. I think the list of exceptions we've had to configure to get it working is the longest of any product I've dealt with (and therefore renders use of the product somewhat redundant as a result)

And yet even with all those exceptions the filter driver it uses chews though CPU as it forces all IO though it.

One of my big customers has to have it. Yea, its all sorts of fun. Of course part of our process for an image update is the have it scanned or whatever by CB before we release it. So yes, we have it working but you can't just update an image and push it out without first letting CB inventory/scan or whatever it does as part of that process. And yes, it is a resource hog. Nodes had to be added to the clusters to take into account for it when they pushed it out

Thoughts on using Ivanti App Control (Appsense App Manager) for similar Whitelisting/Blacklisting features?

as with all things UWM, it's tremendously powerful but has a management overhead

Same thing with Sentinal 1. After you installed it on the gold image, you had to wait like 2 hours for it to finish it's "shit", then setup MCS.

Yea, we are being pushed to use it now. It adding overhead to the login times.