This message was deleted.

You can do this and much more with deviceTRUST. @Sascha Goeckel from deviceTRUST is also here if you have questions.

tnx, as far as I understand it means the installation of "a client software" on the connecting client (which can be a BYOD where the company can not enforce stuff), right ?

Yes, the endpoint needs a client. This client gives a lot of information to the VDA which you can use. There are a lot of use cases especially with regard to WFH or BYOD. You can also handle device license issues or make decisions regarding the location or network condition of your endpoint. It’s all about the context of the client.

should be able to do something with SmartAccess as well...

SmartAccess only used for Netscaler based connctions (external), not for internal, so won't help for our use case Avoiding an install at the endpoint is one of those things that would help to implement (we don't want to enforce external co-workers to install additional software on their workstation -workspace app of course is required); For the managed desktops this could be a solution I guess ...

Every user is able to install the deviceTRUST client, you don’t have to configure anything. Just install and you are done. You get it from the homepage. There are also clients for Mac OS.

maybe Group Policy Item level targeting for Mac address range?

Give it a try, it’s simple to test. I wrote a blog about it, here you have an example: https://www.sul.de/2020/03/11/fslogix-citrix-wem-and-devicetrust-a-wonderful-symbiosis/

@Dennis yes sure, I do believe DeviceTrust looks like a pretty nice solution (more then our scope for now). So we'll keep that in mind and might/will PoC it .. for now we look for something KISS (keep it simple and stupid) 🙂

👍🏼

You could with a script if the devices are connected internally, not so simple.

Given the IP address can be assigned to the MAC address permanently, and the IP address is readable by all the components in the chain, could this work for you without requiring any additional client software?

It is an option we consider indeed (dhcp reservation for each connected dockingstation )