This message was deleted.

Paging @Dave Brett

Cool thanks. I need some advice for this. My security team is wanting it in Citrix asap. But i need to understand the impact.

RUN! Or prepare the security team for the invoices for the additional kit you’ll need.

Same as Tanium. Mega-bloatware for VDI

Additional Kit? What do you mean?

Stay away!

Everybody, please meet @Jarian Gibson, my newly build ’Translation As A Service” bot.

we went from 18-23 nodes with CB on there - you will 100% need more hardware to cater for the existing workloads - same user load / same spec VM’s

Damn, does it impact user logins as well?

It can

it can do - need to be very careful with the config

Thanks for the information. Ill do my best to not allow this.

thats going to depend on the security posture of the company. There are other products but there is every chance that you will be mandated to put this down along with a whole host of other security products and agents. There is nothing wrong with this - just need to make the business aware of the additional compute requirements as well as test pre and post deployment for performance hit.

Cisco AMP is another product that treats virtual workloads the way Fred and Rose West treated babysitters

What are other products that will work well in a citrix environment better?

Bitdefender, Windows Defender, etc.

They're not doing the same thing since those are AV products not really EDRs but EDRs were not built for VDI. That's the sad reality

Yep depends what all you are required to have.

We just switched over to Palo Alto Traps, it's been pretty good so far. Low impact. Bitdefender was good to us as well., but our security team wanted something different, hence the switch.

I’ve seen good results with crowd strike

@Dave Brett Did you apply Vmware's "Citrix Policies" when you did your testing?

ahh - sry - at the all team meeting and missed this - no - we have a bunch of settings mandated by SOC teams - will check that out tho

No worries. We are testing it out, and they gave us some "Citrix Polices" to apply on the console. I just wonder how much they affect performance.

send em over - i can test them

Unfortunately, there is no easy way to see the delta between the two. You literally have to edit each policy and review the settings. I will get it together and send you something. Unless you know something I don't

Ok CB has special policies for citrix?

Yes, i'm going to find some time today to get those for you guys

Im not following, vmware guy made a policy? Assuming CB is apart of VMware now. They have a CB policy that disabled "run background scan"?

CB is owned by VMware, yes. and yes, the CB policy for "Citrix Servers" is identical to the default policy, with just "run background scan" disabled