VMware Horizon 6.1.1 Network Ports Diagram

Horizon 6.1.1 Network PortsWith the recent release of VMware Horizon 6.1.1 (June 2015) come many new features and changes. For 3 years now I’ve been maintaining a diagram detailing all of the network ports used by VMware Horizon (formerly View), and I am pleased to share the third version for the latest release. Many new components are present such as Blast on Linux virtual desktops, the new JMS enhanced security mode (JMS SSL), App Volumes and RDS hosts just to name a few.

I’ve also taken the opportunity to separate tunneled (E.g. PCoIP Secure Gateway or Blast Gateway) connections at the top of the diagram and direct connections at the bottom.

The diagram is an A0 PDF (118.88cm x 84.1cm) which is simply huge! Feel free to print this out and use it as a wall poster :)

Download here

Key Firewall Considerations for VMware Horizon 6

  • TCP/UDP 4173: PCoIP port used internally on RDS hosts (note the diagram needs updating, it still uses 4172 from the client) – See page 221 here
  • TCP 4002: JMS enhanced security mode (SSL)
  • TCP 5443: Blast protocol listening port for Linux virtual desktop direct connections. Requires Horizon Client (requires Horizon Client 3.3 or higher)
  • TCP 8443: Blast protocol listening port for Linux virtual desktop connections via Blast Secure Gateway. Requires Horizon Client (requires Horizon Client 3.3 or higher)
  • TCP 8472: View interpod API (Cloud Pod Architecture)
  • TCP 22389: Global ADLDS (Cloud Pod Architecture)
  • HTTPS (443): Horizon Client access, authentication and RDP tunnel (HTTPS Secure Gateway)*
  • HTTPS (8443): Used for HTML Access. Note: HTML Access for Linux virtual desktops are not officially supported, although most browsers do work.
  • HTTPS (22443): HTML Access (Blast) to Windows virtual desktops
  • TCP 9427: Used by Windows multimedia redirection (MMR) and Client Drive Redirection (CDR)
  • TCP 32111: USB Redirection
  • ESP (Protocol 50) used for Security Server and Connection Server IPSEC communication (requires Windows firewall with Advanced Security to be enabled)
  • UDP 500: IPsec negotiation for Security Server and Connection Server communication and pairing.

*I’d also like to point out that if you enable HTTP(S) Secure Gateway, MMR, CDR and USB redirection channels will use HTTPS.

For a full list of network ports please refer to the latest Horizon 6 documentation: https://www.vmware.com/support/pubs/view_pubs.html

VCDX Study Plan – No Excuses! #VCDX

VCDX Study Plan - No ExcusesStarting my day as usual, I make a coffee and check Twitter to see what you folks are up to. I notice some tweets about sacrifice, lack of sleep and the struggle finding time for VCDX study. This isn’t the first time I’ve heard this, and I want to deal with this head on. No more excuses.

No matter what our goal, it seems that the obstacles life throws in front of us simply get in our way. In particular you have it worse than others right? I mean, where the hell do these people seem to find the time?

Lets take a look at some of the excuses I hear, then we’ll deal with each of them. By the way, keep the conversation going on Twitter! #VCDX

  1. I’m just too busy with the day job.
  2. I have kids!
  3. I don’t have a design to use / it’s out of date.
  4. I have blogging to do!
  5. I don’t have a mentor.
  6. My dog ate it.

[Read more…]

OnePlus One – The Worst Customer Service

I do not usually write blog posts of this nature, but as many of the readers of my blog are in the also into technology and gadgets then you may want to hear about the terrible customer service I have received from OnePlus. On February 2nd 2015 I ordered a OnePlus One 64GB Sandstone Black which arrived next day. I am extremely pleased with the phone itself, but in less than 2 weeks the charger stopped working. In my line of work I travel a lot, and depend on using my phone at the airport for my BA tickets, navigation, email, calendar and it goes without saying that a charger is essential. [Read more…]

VCDX – So You Want To Become a VMware Architect?

Double VCDX Becoming a VCDX (VMware Certified Design Expert) doesn’t mean you have reached the path to enlightenment or qualify you for an immediate pay rise. There, I said it. That is the reality. Yes it is the highest level of certification by VMware but it should NOT be your end game. The VCDX should be an incremental goal to where you want to be, you just might not realize it yet.

I’ve had a lot of time recently to catch up with the latest tweets and blogs from the virtualization community and I’ve noticed a few misconceptions about the VCDX. I have also seen some excellent comments from other VCDX’s that reflect what I am about to say.

In The Beginning

Back in the early days when the VCDX was in low double digits, there were awards, branded beer, and songs around the camp fire under the star lit sky. Well maybe not the last one but it was a big celebration and rightly so. The number of VCDX title holders are in the hundreds now and I wouldn’t think it is practical to have such a merry dance and award ceremony each time someone achieves their VCDX. Don’t get me wrong I would love this to be case, camp fire songs included, but that just isn’t going to happen.

[Read more…]

VMware EUC and Datacenter Visio Stencils 2015

Update 2: Now includes even more VMware NSX shapes!
VMware EUC Horizon 6 Visio StencilsI can’t believe it has been almost a year since I last posted the VMware vSphere and End User Computing stencil set for Microsoft Visio. After a few instances with broken links this past few weeks I decided the icons and graphics needed an update for 2015 anyway. I’ve now included App Volumes and removed some older graphics, in addition to including many application icons such as Microsoft Office 2013, 2010, Windows 8 and Windows 10.

These are not official VMware stencils, but I often use these when putting diagrams or presentations together. You can also copy these from Microsoft Visio to PowerPoint with a simple copy & paste.

These are free to use and share so click the Twitter link at the bottom of this post and share with the community!

Download the Stencil Set: VMware EUC and Datacenter 2015 Visio Stencil Set

[Read more…]

EUC Sessions at VMworld Barcelona 2014 (EUC3330-GD)

VMworld (Barcelona) 2014
As usual for this time of year I’m excited to be making my final preparations for VMworld Europe (Barcelona) and I thought I’d try something new and host a group discussion about using Horizon 6 with RDS Hosted Applications and Desktops. If you are interested in taking part then make sure to register for EUC3330-GD using the VMworld schedule builder. As the title suggests, being a group discussion means that this will be interactive and give you the opportunity to not only hear from myself on VMware Horizon 6 and RDS best practices, but hear from partners and customers on their implementations and experiences.

I look forward to seeing you all there!