Block DoubleHop Launch
You can block the opening of virtual apps, desktops, web apps, or SaaS apps enabled with App Protection feature in a double hop scenario.
Pre-requisites:
-
To block opening of a virtual app or desktop, ensure that you’re running Citrix Workspace app for Windows 2309 or later on the first hop.
-
To block opening of web or SaaS apps, ensure that you are using Citrix Enterprise Browser version 123 or later.
Deploy the following configurations to all VDAs on the first hop:
-
Update the latest GPO policies. For more information, see Update latest GPO policies.
-
Launch Group Policy Editor and then go to Computer Configuration > Administrative Templates > Citrix Components > Citrix Workspace > App Protection > Block DoubleHop Launch.

-
Select Enabled and then click OK.
Block DoubleHop Launch setting is enabled and you’re blocked if you try to do double hop launch.
Note:
Windows Server OS doesn't support App Protection. So, the Virtual Apps and Desktops that are enabled with App Protection aren't displayed if you’re running a Windows server OS on the first hop.