This message was deleted.

What about EPA with SmartControl?

Using a session policy with an advanced expression, you should be able to accomplish this. It will require ICA Only to be false, and all of the other Smart Access requirements. Your session policies will all need to be converted to advanced if you haven’t done that already.

Yeah, SmartAccess is generally the way to go if you are looking to do more than full on allow/deny based on region. I see customers use the GSLB location engine to do blocking in PI. Could also do something like HTTP callout to an API that returns country info.

Thanks guys, I get all of what you are talking about but does that let me control on a per app basis at the NS? Because I think I would still need multiple delivery groups, each configured to match a policy I set on the NS right? So a complex set of policies on the NS side it would mean potentially multiple delivery groups?

I believe smartaccess filters can be set on a per app/desktop basis

Thanks Mike - that confirms my thinking about delivery group level. I know apps can be hidden in SF, is that what you're thinking of? I don't think that can be combined with NS though.... there's this article as well which uses the SDK to hide apps but again it states it's DG level

I think you’re going to have to create a delivery group for each app you want to hide, you can’t bind a smart access policy to anything else

Have a look at https://devicetrust.com. It might help you with your goals.

Thanks Rene - that might work but as always client doesn't want to spend any more money!