Hi,
I'm also trying to find solution to prevent access from any device (home PC) and allow remote VDI users to access Horizon only from Tera2 Zero Clients (not Win based client) through a UAG. The Device Certificate authentication could be the solution, but we already use RADIUS as Azure MFA (which is mandatory). But both x509 and Radius authentication are not supported by UAG.
@fabio1975maybe there is an option to manage with Azure AD conditional access era2 Zero Client as well?
Maybe anyone has other recommendations on how to implement this?
