Client Forwarding Policy controls which application segment definitions are downloaded to the client.
Often you will not want a client to download application segments to ensure DNS interception doesn't occur for those FQDNs. However, if you still enable the user to retrieve the autodiscover application segment, you will get results you didn't expect.
This video walks you through the effects of Access Policy and Client Forwarding Policy, and how to achieve the results you are expecting.
