With an EUC Access Point, is it possible to turn off Web Access (prevent connections)...
e.g. No service at https://<euc host name>/portal/webclient/index.html#/
...while still permitting connections from clients using standard Horizon View Clients? (Windows, Android etc.)
Or are both eggs in one EUC-basket, so to speak?
You can disable HTML access on a per-pool basis in the Horizon Admin console, but I'm not aware of a supported way to completely kill that section of the interface.
Sorry for the delayed response. I missed this earlier.
Yes, you can block portal access by altering the proxyPattern setting in Access Point.
We provide a sample PowerShell command to deploy Access Point and you can customise it for your own specific needs. See Using PowerShell to Deploy VMware Access Point
In the file apdeploy.psm1, you'll see a line as follows that controls the filtering for /portal access.
$edgeServiceSettingsVIEW += "\'proxyPattern\':\'(/|/view-client(.*)|/portal(.*)|/appblast(.*))\'"
For example, you could alter this line to remove /portal i.e.:
$edgeServiceSettingsVIEW += "\'proxyPattern\':\'(/|/view-client(.*)|/appblast(.*))\'"
Then just redeploy Access Point with the command apdeploy.ps1 and it will redepoloy Access Point preserving all your original settings but with the filtered out portal access.
Mark