6.0

Table 111. TCP and UDP Ports Used by View
Source Port Target Port Protocol Description
Security server 55000 View Agent 4172 UDP PCoIP (not SALSA20) if PCoIP Secure Gateway is
used.
Security server 4172 Horizon Client 50001 UDP PCoIP (not SALSA20) if PCoIP Secure Gateway is
used.
Security server 500 View Connection
Server
500 UDP IPsec negotiation traffic.
Security server * View Connection
Server
4001 TCP JMS traffic.
Security server * View Connection
Server
8009 TCP AJP13-forwarded Web traffic, if not using IPsec.
Security server * View Connection
Server
* ESP AJP13-forwarded Web traffic, when using IPsec
without NAT.
Security server 4500 View Connection
Server
4500 UDP AJP13-forwarded Web traffic, when using IPsec
through a NAT device.
Security server * View desktop 3389 TCP Microsoft RDP traffic to View desktops.
Security server * View desktop 9427 TCP Wyse MMR redirection.
Security server * View desktop 32111 TCP USB redirection.
Security server * View desktop 4172 TCP PCoIP (HTTPS) if PCoIP Secure Gateway is used.
Security server * View desktop 22443 TCP HTML Access.
View Agent 4172 Horizon Client 50001 UDP PCoIP, if PCoIP Secure Gateway is not used.
View Agent 4172 View Connection
Server or security
server
55000 UDP PCoIP (not SALSA20) if PCoIP Secure Gateway is
used.
Horizon Client * View Connection
Server or security
server
80 TCP SSL (HTTPS access) is enabled by default for client
connections, but port 80 (HTTP access) can be used
in certain cases. See “Notes and Caveats for TCP
and UDP Ports Used by View,” on page 20.
Horizon Client * View security
server
443 TCP HTTPS access. Port 443 is enabled by default for
client connections. Port 443 can be changed.
Connection attempts over HTTP to port 80 are
redirected to port 443 by default, but port 80 can
service client connections if SSL is off-loaded to an
intermediate device. You can reconfigure the
redirection rule if the HTTPS port was changed.
See “Notes and Caveats for TCP and UDP Ports
Used by View,” on page 20.
Horizon Client * View Connection
Server
443 TCP HTTPS access. Port 443 is enabled by default for
client connections. Port 443 can be changed.
Client connection attempts to port 80 are
redirected to port 443 by default, but port 80 can
service client connections if SSL is off-loaded to an
intermediate device. Connection attempts to port
80 to reach View Administrator are not redirected.
You must connect over HTTPS to reach View
Administrator.
You can prevent HTTP redirection and force
clients to use HTTPS. See “Notes and Caveats for
TCP and UDP Ports Used by View,” on page 20.
Horizon Client * View Connection
Server or security
server
4172 TCP PCoIP (HTTPS) if PCoIP Secure Gateway is used.
View Security
18 VMware, Inc.