Security
Table Of Contents
- View Security
- Contents
- View Security
- Horizon 7 Accounts, Resources, and Log Files
- View Security Settings
- Ports and Services
- Configuring Security Protocols and Cipher Suites on a View Connection Server Instance or on a Security Server
- Configuring Security Protocols and Cipher Suites for Blast Secure Gateway
- Deploying USB Devices in a Secure Horizon 7 Environment
- HTTP Protection Measures on Connection Servers and Security Servers
- Index
Table 1‑2. Horizon Database Accounts
Horizon Component Required Accounts
View Composer
database
An SQL Server or Oracle database stores View Composer data. You create an administrative
account for the database that you can associate with the View Composer user account.
For information about seing up a View Composer database, see the View Installation document.
Event database used
by Horizon
Connection Server
An SQL Server or Oracle database stores Horizon event data. You create an administrative
account for the database that Horizon Administrator can use to access the event data.
For information about seing up a View Composer database, see the View Installation document.
To reduce the risk of security vulnerabilities, take the following actions:
n
Congure Horizon 7 databases on servers that are separate from other database servers that your
organization uses.
n
Do not allow a single user account to access multiple databases.
n
Congure separate accounts for access to the View Composer and event databases.
Horizon 7 Resources
Horizon 7 includes several conguration les and similar resources that must be protected.
Table 1‑3. Horizon Connection Server and Security Server Resources
Resource Location Protection
LDAP seings Not applicable. LDAP data is protected automatically
as part of role-based access control.
LDAP backup les
%ProgramData%\VMWare\VDM\backups
Protected by access control.
locked.properties
(secure gateway
conguration le)
install_directory\VMware\VMware
View\Server\sslgateway\conf
Ensure that this le is secured against
access by any user other than Horizon
administrators.
absg.properties
(Blast Secure
Gateway
conguration le)
install_directory\VMware\VMware
View\Server\appblastgateway
Ensure that this le is secured against
access by any user other than Horizon
administrators.
Log les See “Horizon 7 Log Files,” on page 8 Protected by access control.
web.xml
(Tomcat
conguration le)
install_directory\VMware
View\Server\broker\web apps\ROOT\Web INF
Protected by access control.
Horizon 7 Log Files
Horizon 7 creates log les that record the installation and operation of its components.
N Horizon 7log les are intended for use by VMware Support. VMware recommends that you
congure and use the event database to monitor Horizon 7. For more information, see the View Installation
and View Integration documents.
View Security
8 VMware, Inc.