the pcoip protocol requires view security server

Note: Access Point supports 443 port sharing, but Security Servers do not.įor all other configurations that don’t use Blast Extreme (PCoIP, HTML Blast), the following ports must be load balanced: Note: UDP is disabled by default, but it can be enabled using a Blast GPO setting.įor View Security Servers, and Blast Extreme protocol only, then the following load balancing ports are needed. Here are typical load balancing port requirements for Access Point with Blast Extreme only: If you use VMware Access Point with Blast Extreme exclusively, then the number of ports is minimal, and load balancing configuration is simplified.

HTML Access in Horizon 7 also uses Blast Extreme protocol (TCP/UDP 443). VMware Technical White Paper Blast Extreme Display Protocol in Horizon 7.įor VMware Access Point, Blast Extreme only needs TCP and UDP 443 only. Horizon 7 introduces a new Blast Extreme protocol. Since Security Servers are paired with Connection Servers, you need to configure load balancing monitors to disable the Security Server if the paired Connection Server is not accessible. Since Access Points are not paired with Connection Servers, you don’t need this special monitoring configuration. There is no need to load balance the internal Paired Connection Servers. The DMZ Security Servers are paired with two additional internal “paired” Connection Servers.Each Security Servers connects directly to a “paired” Connection Servers. Two DMZ Security Servers – these need to be load balanced on a DMZ VIP.With Security Servers instead of Access Points, a typical Horizon Infrastructure will have at least six connection servers: Access Points connect to the internal VIP. Two DMZ Access Point appliances – these need to be load balanced on a DMZ VIP.Internal users connect to the internal VIP. Two Internal Connection Servers – these need to be load balanced on an internal VIP.If you are using Access Points instead of Security Servers then you’ll have the following machines in a highly available Horizon infrastructure: This includes: Smart Cards, RSA, and RADIUS. Authentication can be offloaded to Access Point.Linux appliance instead of Windows server.No need to pair with internal Connection Servers.There are two VMware-provided remote access solutions for Horizon:Īccess Points are preferred over Security Servers for the following reasons: Use this procedure to load balance Horizon View Connection Servers, Horizon View Security Servers, and/or VMware Access Points.

The pcoip protocol requires view security server