Forum Discussion
AltostratusCompatibility of BIG-IP Edge Client with Azure Virtual Desktop (AVD) Multi-Session Environments
EmployeeSuper. This makes sense.
I think we have a pretty good argument in that Microsoft post that they don't recommend VPN clients in that environment. There seem to be the same kind of recommendations about Cisco Anyconnect, which uses similar architecture.
Another speculative consideration is that with both Edge Client and Cisco Anyconnect, we/they offer integration with a client-side security library called OPSWAT. This requires admin-level privileges on the workstation, and probably won't run correctly with user-permissions on a multi-session host like AVD or RDS.
Overall this sounds like a tough situation to work out. On the one hand the security provided by AVD is highly useful, but on the other it doesn't offer quite as much capability as a full Windows VM with an independent network stack.
AltostratusHi Lucas,
Thank you so much for your thorough explanation and for helping me see the full picture. It’s becoming clear that achieving this with our current setup might be more of a "mission impossible" than I originally anticipated—so thanks for making that crystal clear!
What you mentioned about using a full Windows VM with an independent network stack really got me thinking. It could be a practical workaround for us. I’m considering setting up a dedicated Windows machine specifically for those occasional tasks that require the VPN. Since these activities aren't constant, I think this solution might work well without needing continuous concurrent access.
I’ll definitely look into this further. Your advice has been incredibly helpful, and I appreciate you taking the time to share it!
Thanks again,
Luca
