Architecture Planning

Table Of Contents
Table 52. Back-End Firewall Rules (Continued)
Source
Default
Port Protocol Destination
Default
Port Notes
Security
server
TCP Any
UDP
55000
PCoIP Remote
desktop or
application
TCP 4172
UDP 4172
Security servers connect to remote desktops and
applications on TCP port 4172 and UDP port 4172 to
exchange PCoIP traffic.
Remote
desktop or
application
UDP 4172 PCoIP Security server UDP
55000
Remote desktops and applications send PCoIP data
back to a security server from UDP port 4172 .
The destination UDP port will be the source port from
the received UDP packets and so as this is reply data, it
is normally unnecessary to add an explicit firewall rule
for this.
Security
server
TCP Any USB-R Remote
desktop
TCP 32111 Security servers connect to remote desktops on TCP
port 32111 to exchange USB redirection traffic between
an external client device and the remote desktop.
Security
server
TCP Any HTTPS Remote
desktop
TCP 22443 If you use HTML Access, security servers connect to
remote desktops on HTTPS port 22443 to communicate
with the Blast agent.
Security
server
ESP Connection
Server
Encapsulated AJP13 traffic when NAT traversal is not
required. ESP is IP protocol 50. Port numbers are not
specified.
Connection
Server
ESP Security server Encapsulated AJP13 traffic when NAT traversal is not
required. ESP is IP protocol 50. Port numbers are not
specified.
Understanding View Communications Protocols
View components exchange messages by using several different protocols.
Figure 5-5 illustrates the protocols that each component uses for communication when a security server is
not configured. That is, the secure tunnel for RDP and the PCoIP secure gateway are not turned on. This
configuration might be used in a typical LAN deployment.
View Architecture Planning
86 VMware, Inc.