Block DoubleHop Launch

You can block the opening of virtual apps, desktops, web apps, or SaaS apps enabled with App Protection feature in a double hop scenario.


  • To block opening of a virtual app or desktop, ensure that you’re running Citrix Workspace app for Windows 2309 or later on the first hop.
  • To block opening of web or SaaS apps, ensure that you are using Citrix Enterprise Browser version 123 or later.

Deploy the following configurations to all VDAs on the first hop:

  1. Update the latest GPO policies. For more information, see Update latest GPO policies.

  2. Launch Group Policy Editor and then go to Computer Configuration > Administrative Templates > Citrix Components > Citrix Workspace > App Protection > Block DoubleHop Launch.

    Select Block DoubleHop Launch setting

  3. Select Enabled and then click OK.

    Select Enabled for Block DoubleHop Launch setting

    Block DoubleHop Launch setting is enabled and you’re blocked if you try to do double hop launch.


Windows Server OS doesn’t support App Protection. So, the Virtual Apps and Desktops that are enabled with App Protection aren’t displayed if you’re running a Windows server OS on the first hop.

Block DoubleHop Launch

In this article