This message was deleted.

I have a customer with this scenario. He want internal although a 2-way auth

Security & HDX Insight

security like port forward and cache based redirect etc..?

AppFlow

security as in you have one choke point for logs/etc which is handy with troubleshooting. HDX Insight is definitely something to start looking at again once you get to latest LTSR since that uses NSAP instead of the ADC to parse traffic. If using NS for all ICA traffic too then there's a bit more security since you can configure firewalls to only allow access to VDAs from SNIP so users never directly reach out and touch any of the infrastructure if that's of interest.

Some of our secure environments use this - as Mike said above it's one point for logging, also simplifies firewall/routing etc, only one IP/port needs to be exposed to endpoints. And some customers want MFA on both internal and external access - NS makes that easy

For us its MFA internally. Which then simplest hdx insights