In part 3 of my installing and configuring VMware Horizon View 6 we look at installing a security server. This servers role is to secure the View environment by proxying traffic which ensures SSL connections and also that the PCOIP traffic is encrypted making it suitable for connections from the internet.
Again installation is straightforward and requires only a couple of extra steps to achieve so I’ve created a video on the process instead of a full on blog post.
VMware do say that the security servers can reside in the DMZ perfectly happily and best practice is that the servers are not joined to a domain. However I would personally still keep these servers on the internal side and utilise a proper load balancing appliance such as a Citrix NetScaler for F5 to ensure that the traffic is load balanced and that high availability is also thrown into the mix which is not present within the default VMware Horizon View 6 stack.
Author: Dale Scriven
Hi, appreciate the post but it is very basic, are you doing a troubleshooting one? In my experience so far there isn’t much out there to guide on issues with Sec servers.
We’re currently installing a View 6 environment (currently run 5.2 but am building a completely separate environment to move to)
The problems occur however when you have:
a) A firewall managed by a 3rd party – Make sure you provide them with all ports that need opening esp IPSec ports TCP50, 51 and UDP 500 and add the IPSec rules to Win Firewall too as the install doesn’t do it for you.
b)SSL certs – the install guide seems v straightforward – doesn’t work out like that though 🙁 Once I’ve figured it out I’ll post back what happened and how it was fixed – Can’t imagine that I’m the only one with issues!
Good point about the firewall ports having your firewall managed by a third party can be a blessing or a curse 🙂 I might cover that as a subject.
The SSL certs for security servers is quite straight forward not sure which guide you are referring to but I have a post on the subject which works well, The key to it is to ensure you click the mark the key as exportable and export the whole certificate as a pfx file from IIS. My post can be found here https://vhorizon.co.uk/configuring-an-external-vmware-view-security-server-ssl-certificate/
Regards
Dale