Security
Table Of Contents
- View Security
- Contents
- View Security
- View Accounts, Resources, and Log Files
- View Security Settings
- Ports and Services
- Configuring Security Protocols and Cipher Suites on a View Connection Server Instance or on a Security Server
- Default Global Policies for Security Protocols and Cipher Suites
- Configuring Global Acceptance and Proposal Policies
- Configure Acceptance Policies on Individual View Servers
- Configure Proposal Policies on View Desktops
- Internet Engineering Task Force Standards
- Older Protocols and Ciphers Disabled in View
- Reducing MIME Type Security Risks
- Mitigating Cross-Site Scripting Attacks
- Content Type Checking
- Origin Checking
- Configuring Security Protocols and Cipher Suites for Blast Secure Gateway
- Deploying USB Devices in a Secure View Environment
- Index
Table 3‑1. TCP and UDP Ports Used by View (Continued)
Source Port Target Port
Protoc
ol Description
Horizon Client * View
Connection
Server
443 TCP HTTPS access. Port 443 is enabled by default for
client connections. Port 443 can be changed.
Client connection attempts to port 80 are redirected
to port 443 by default, but port 80 can service client
connections if SSL is off-loaded to an intermediate
device. Connection attempts to port 80 to reach
View Administrator are not redirected. You must
connect over HTTPS to reach View Administrator.
You can prevent HTTP redirection and force clients
to use HTTPS. See “Notes and Caveats for TCP and
UDP Ports Used by View,” on page 21.
Horizon Client * View
Connection
Server or
security server
or Access Point
appliance
4172 TCP
and
UDP
PCoIP if PCoIP Secure Gateway is used.
Horizon Client * View desktop 3389 TCP Microsoft RDP traffic to View desktops if direct
connections are used instead of tunnel connections.
Horizon Client * View desktop 9427 TCP Windows Media MMR redirection and client drive
redirection, if direct connections are used instead of
tunnel connections.
Horizon Client * View desktop 32111 TCP USB redirection and time zone synchronization if
direct connections are used instead of tunnel
connections.
Horizon Client * View Agent 4172 TCP
and
UDP
PCoIP if PCoIP Secure Gateway is not used.
Horizon Client Varies View Agent 4172 UDP PCoIP if PCoIP Secure Gateway is not used.
NOTE Because the source port varies, see “Notes
and Caveats for TCP and UDP Ports Used by
View,” on page 21.
Horizon Client Varies View
Connection
Server or
security server
4172 UDP PCoIP (not SALSA20) if PCoIP Secure Gateway is
used.
NOTE Because the source port varies, see “Notes
and Caveats for TCP and UDP Ports Used by
View,” on page 21.
Web Browser * Security server
or Access Point
appliance
8443 TCP HTML Access.
View
Connection
Server
* View
Connection
Server
48080 TCP For internal communication between View
Connection Server components.
View
Connection
Server
* vCenter Server
or View
Composer
80 TCP SOAP messages if SSL is disabled for access to
vCenter Servers or View Composer.
View
Connection
Server
* vCenter Server 443 TCP SOAP messages if SSL is enabled for access to
vCenter Servers.
View
Connection
Server
* View
Composer
18443 TCP SOAP messages if SSL is enabled for access to View
Composer.
Chapter 3 Ports and Services
VMware, Inc. 19