Jump to content
Welcome to our new Citrix community!

Hello, What is the best way to construct nFactor EPA pre auth expressions for both macOS and Windows?

Mike Smithson

Recommended Posts

We currently have 2 separate EPA actions bound to auth 2 auth policies, one for Windows and one for macOS, both policies bound to a AAA vServer in a policy order Windows 100 --> NEXT ----> 110 Mac. We are using User-Agent header contain "Win" on the Window EPA auth policy in an attempt to only apply the Windows EPA scans to Windows, mac EPA auth policy has Agent header contain "mac" to apply to macOS. We appear to be getting inconsistent results. Is this the best method to approach this challenge?

Link to comment
Share on other sites

I would likely have written a single expression that did both.

Perhaps something similar to:


First, the check will determine if the client has MacOS version 10.13 or above and a version of AV. Second, the check will identify if the client has Windows 8.1 and any version of AV. If either the first or second group of checks passes the EPA scan will return success.

Link to comment
Share on other sites

  • 1 month later...

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Create New...