This message was deleted.

This varies from customer to customer. many do not restrict authorization form home device as this falls under Any device, any time anywhere, Most will require the same security from a personal device vs a corporate device such as MFA for access. Some (a minority imo) may choose things like endpoint analysis to scan the PC for various criteria like antivirus etc.

For EPA - client is must correct?

There is an agent requirement for EPA, it will prompt for download/install on first scan to check for the agent

Okay. so this agent a normal user can also install?

Admin rights are needed for installation, assumption for home devices most people would have admin priviledge

Okay thanks @Phillip Jones

deviceTRUST: https://devicetrust.com/homeoffice

Thanks @Dennis

I treat all devices coming through ICA proxy as the same. I don’t trust any of them and shut down all things that could allow data traverse out. No USB storage no client drives etc. I figure there are enough things like OneDrive and such that can allow for safer transfer and more efficient that it doesn’t need to happen on a virtual channel. Keeps it clean from admin perspective too.