6.0

Table Of Contents
When end users such as home or mobile workers access desktops from the Internet, security servers provide
the required level of security and connectivity so that a VPN connection is not necessary. The PCoIP Secure
Gateway component ensures that the only remote traffic that can enter the corporate data center is traffic on
behalf of a strongly authenticated user. End users can access only the resources that they are authorized to
access.
View LDAP
View LDAP is an embedded LDAP directory in View Connection Server and is the configuration repository
for all View configuration data.
View LDAP contains entries that represent each remote desktop and application, each accessible remote
desktop, multiple remote desktops that are managed together, and View component configuration settings.
View LDAP also includes a set of View plug-in DLLs to provide automation and notification services for
other View components.
View Messaging
The View Messaging component provides the messaging router for communication between View
Connection Server components and between View Agent and View Connection Server.
This component supports the Java Message Service (JMS) API, which is used for messaging in View.
By default, RSA keys that are used for intercomponent message validation are 512 bits. The RSA key size
can be increased to 1024 bits if you prefer stronger encryption.
If you want all keys to be 1024 bits, the RSA key size must be changed immediately after the first View
Connection Server instance is installed and before additional servers and desktops are created. See VMware
Knowledge Base (KB) article 1024431 for more information.
Firewall Rules for View Connection Server
Certain ports must be opened on the firewall for View Connection Server instances and security servers.
When you install View Connection Server, the installation program can optionally configure the required
Windows Firewall rules for you. These rules open the ports that are used by default. If you change the
default ports after installation, you must manually configure Windows Firewall to allow Horizon Client
devices to connect to View through the updated ports.
If you choose to install HTML Access with View Connection Server, the installer configures the VMware
Horizon View Connection Server (Blast-In) rule in Windows Firewall to open TCP port 8443, used by
HTML Access.
The following table lists the default ports that can be opened automatically during installation. Ports are
incoming unless otherwise noted.
Table 54. Ports Opened During View Connection Server Installation
Protocol Ports View Connection Server Instance Type
JMS TCP 4001 Standard and replica
JMSIR TCP 4100 Standard and replica
AJP13 TCP 8009 Standard and replica
HTTP TCP 80 Standard, replica, and security server
HTTPS TCP 443 Standard, replica, and security server
PCoIP TCP 4172 in;
UDP 4172 both
directions
Standard, replica, and security server
View Architecture Planning
88 VMware, Inc.