To ensure that only users who have data antivirus protection can connect to the environment, a Citrix Administrator should configure a preauthentication scan. This feature checks the user's device for compliance with specified security policies, such as antivirus protection, before allowing access to the network.