6.0.2

n
At a command prompt on the machine, verify that TCP port 4001, which View Agent uses to establish
JMS communication with the View Connection Server host, is working by typing the telnet command.
telnet CS_FQDN 4001
If the telnet connection is established, network connectivity for JMS is working.
n
If a security server is deployed in the DMZ, verify that exception rules are configured in the inner
firewall to allow RDP connectivity between the security server and virtual machines on TCP port 3389.
n
If secure connections are bypassed, verify that the firewall rules allow a client to establish either a direct
RDP connection to the virtual machine on TCP port 3389, or a direct PCoIP connection to the virtual
machine on TCP port 4172 and UDP port 4172.
n
Verify that exception rules are configured in the inner firewall to allow connections between each
Security Server and its associated View Connection Server host on TCP port 4001 (JMS) and TCP port
8009 (AJP13).
Connection Problems Between Horizon Client and the PCoIP Secure Gateway
You might experience connection problems between Horizon Client and a security server or View
Connection Server host when the PCoIP Secure Gateway is configured to authenticate external users that
communicate over PCoIP.
Problem
Clients that use PCoIP cannot connect to or display View desktops. The initial login to a security server or
View Connection Server instance succeeds, but the connection fails when the user selects a View desktop.
This issue occurs when the PCoIP Secure Gateway is configured on a security server or View Connection
Server host.
NOTE Typically, the PCoIP Secure Gateway is leveraged on a security server. In a network configuration in
which external clients connect directly to a View Connection Server host, the PCoIP Secure Gateway can
also be configured on View Connection Server.
Cause
Problems connecting to the PCoIP Secure Gateway can occur for different reasons.
n
Windows Firewall has closed a port that is required for the PCoIP Secure Gateway.
n
The PCoIP Secure Gateway is not enabled on the security server or View Connection Server instance.
n
The PCoIP External URL setting is configured incorrectly. You must specify this setting as the external
IP address that clients can access over the Internet.
n
The PCoIP External URL, secure tunnel External URL, Blast External URL, or another address is
configured to point to a different security server or View Connection Server host. When you configure
these addresses on a security server or View Connection Server host, all addresses must allow client
systems to reach the current host.
n
The client is connecting through an external web proxy that has closed a port required for the PCoIP
Secure Gateway. For example, a web proxy in a hotel network or public wireless connection might
block the required ports.
n
The View Connection Server instance that is paired with the security server on which the PCoIP Secure
Gateway is configured is version View 4.5 or earlier. The security server and paired View Connection
Server instance must be View 4.6 or later.
Chapter 18 Troubleshooting Machines and Desktop Pools
VMware, Inc. 277