Loading

×Sorry to interrupt
CSS Error

Refresh

Cookie Preference Center

General Information on cookies

When you visit our website, we use cookies to ensure that we give you the best experience. This information does not usually directly identify you, but it can give you a more personalized web experience. Because we respect your right to privacy, you can choose not to allow some types of cookies by clicking on the different category headings to find out more and change your settings. However, blocking some types of cookies may impact your experience on the site and the services we are able to offer. Further information can be found in our

Cookie Policy.

Strictly Necessary

Strictly Necessary

Always Active

Strictly Necessary

Strictly necessary cookies are always enabled since they are essential for our website to function. They enable core functionality such as security, network management, and website accessibility. You can set your browser to block or alert you about these cookies, but this may affect how the website functions. For more information please visit www.aboutcookies.org or www.allaboutcookies.org.

Cookie Details‎

Performance

Performance

Performance

Performance cookies are used to analyze the user experience to improve our website by collecting and reporting information on how you use it. They allow us to know which pages are the most and least popular, see how visitors move around the site, optimize our website and make it easier to navigate.

Cookie Details‎

Please confirm your settings by refreshing the page.

Functional

Functional

Functional

Functional cookies help us keep track of your past browsing choices so we can improve usability and customize your experience. These cookies enable the website to remember your preferred settings, language preferences, location and other customizable elements such as font or text size. If you do not allow these cookies, then some or all of these services may not function properly.

Cookie Details‎

Advertising

Advertising

Advertising

Advertising cookies are used to send you relevant advertising and promotional information. They may be set through our site by third parties to build a profile of your interests and show you relevant advertisements on other sites. These cookies do not directly store personal information, but their function is based on uniquely identifying your browser and internet device.

Cookie Details‎

Advertising Cookies

Consent Leg.Interest

Select All Vendors

Select All Vendors

Select All Hosts

Select All

Clear Filters

Information storage and access

Apply

Confirm My Choices Reject All Allow All

My Subscriptions

Loading

Knowledge Base

VMware Horizon ports and network connectivity requirements (1027217)

Last Updated: 5/23/2023Categories: Best PracticesTotal Views: 119875Language:
Chinese (Simplified)Portuguese (European)JapaneseSpanishEnglish

178 like this article

Subscribe to get an email
newsletter with new updates

178 people found this helpful Please provide article feedback:

Purpose

This article provides the network connectivity requirements for VMware Horizon 7.

For the latest Ports guidance please refer to Horizon - Ports and Protocols.
For network flow diagrams in addition to ports, please reference Network Ports in VMware Horizon 7

Resolution

For successful network connectivity in VMware Horizon view 7 and later, ensure that:

Connection Servers and Replica Servers use Static IPs

Replica Server is on the same LAN as the Connection Server. Replication over WAN is not supported

Ensure that these required ports allow incoming connections.

Note: All ports are TCP, unless specified otherwise.

TCP Ports for View Connection Server and Replica Server Instances

Source

Destination

Port

Protocol

View Desktop

Connection Server

4001

JMS

Replica Connection Servers

Connection Server

4100

JMSIR

Admin Browser

Connection Server

80

HTTP

Admin Browser

Connection Server

443

HTTPS

Client 1

Connection Server

4172

PCoIP
(TCP and UDP)

Client 2

Connection Server

443

HTTPS

Connection Server 1

View Desktop Subnet

4172

PCoIP

Connection Server 2

View Desktop Subnet

3389

RDP

Connection Server

Virtual Center Server

443

HTTPS

Connection Server

Virtual Center Server

80

HTTP

Connection Server

Virtual Center Server
(View Composer)

18443

HTTPS

TCP Ports for View Security Server

Source

Destination

Port

Protocol

Client

Security Server

443

HTTPS

Client

Security Server

80

HTTP

Client 1

Security Server

4172

PCoIP
(TCP and UDP)

Security Server1

View Desktop Subnet

4172

PCoIP
(TCP and UDP)

Security Server

View Desktop Subnet

3389

RDP

Security Server

View Desktop

9427

MMR

Security Server

Connection Server

8009

AJP13

Security Server

Connection Server

4001

JMS

Security Server

Connection Server

4002

JMS

Security Server

Connection Server

500

IPSec (UDP)

Security Server

Connection Server

4500

NAT-T ISAKMP (UDP)

Connection Server

Security Server

500

IPSec (UDP)

Connection Server

Security Server

4500

NAT-T ISAKMP (UDP)

Security Server

Connection Server

ESP (IP Protocol 50)

Note:

Port 80 is required if SSL is disabled.

TCP Ports for View Agent

Source

Destination

Port

Protocol

Client

View Desktop

3389

RDP

Connection Server2

View Desktop

3389

RDP

Client

View Desktop

4172

PCoIP(TCP and UDP)

Connection Server1

View Desktop

4172

PCoIP(TCP and UDP)

Security Server1

View Desktop

4172

PCoIP(TCP and UDP)

Client

View Desktop

32111

USB Redirection

Client

View Desktop
(Physical Only)

42966

HP RGS

Client

View Desktop

9427

MMR

View Desktop

Connection Server

4001

JMS

View Desktop

Connection Server

4002

JMS

UDP Ports for View Connection Server and RSA SecurID Authentication Manager see VMware Ports and Protocols for Horizon 7.

Firewall rules for DMZ-based Security Servers

Front-End Firewall Rules

Source

Destination

Port

Protocol

Any External IP

Security Server

80

HTTP

Any External IP

Security Server

443

HTTPS

Any External IP

Security Server1

4172

PCoIP
(TCP and UDP)

Back-End Firewall Rules

Source

Destination

Port

Protocol

Security Server

Connection Server

8009

AJP13

Security Server

Connection Server

4001

JMS

Security Server

Connection Server

4002

JMS (Secure)

Security Server

View Desktop

3389

RDP

Security Server 1

View Desktop

4172

PCoIP
(TCP and UDP)

Security Server

View Desktop

32111

USB Redirection

Security Server

Connection Server

500

IPSec (UDP)

Security Server

Connection Server

4500

NAT-T ISAKMP (UDP)

Connection Server

Security Server

500

IPSec (UDP)

Connection Server

Security Server

4500

NAT-T ISAKMP (UDP)

Security Server 1

Connection Server

4172

PCoIP
(TCP and UDP)

Security Server

Remote Desktop Services

4172

PCoIP
(TCP and UDP)

TCP ports for VMware Horizon HTML Access

Source

Destination

Port

Protocol

Client

Connection Server

443

HTTPS

Client 4

Connection Server

8443

TCP

Client

Security Server

443

HTTPS

Client 4

Security Server

8443

TCP

Connection Server 4

View Desktop

22443

TCP

Security Server 4

View Desktop

22443

TCP

Client 5

View Desktop

22443

TCP and UDP

TCP ports for VMware vRealize Operations Manager (formerly vCenter Operations) for Horizon View

Source

Destination

Port

Protocol

View Connection Server

vRealize Operations Manager Analytics VM

3091

Java RMI 6

View Desktop

vRealize Operations Manager Analytics VM

3091

Java RMI 7

View Desktop

vRealize Operations Manager Analytics VM

3092

Java RMI 7

View Connection Server

vRealize Operations Manager Analytics VM

3093

Java RMI 6

View Connection Server

vRealize Operations Manager Analytics VM

3094

Java RMI 7

View Agent

vRealize Operations Manager Analytics VM

3099

Java RMI

View Agent

vRealize Operations Manager Analytics VM

3100

Java RMI

View Agent

vRealize Operations Manager Analytics VM

3101

Java RMI

Firewall rules for DMZ based VMware Unified Access Gateway Appliances (formally known as Access point) for Horizon View

Front-End Firewall Rules

Source

Destination

Port

Protocol

Horizon Client8

Unified Access Gateway Appliance

80

HTTP

Horizon Client

Unified Access Gateway Appliance

443

HTTPS

Horizon Client

Unified Access Gateway Appliance

4172

PCoIP
(TCP and UDP)

Unified Access GatewayAppliance

Horizon Client

4172

PCoIP
(UDP)

Client Web Browser

Unified Access Gateway Appliance

8443

HTTPS or Blast
(TCP and UDP)

Back-End Firewall Rules

Source

Destination

Port

Protocol

Unified Access Gateway Appliance

View Connection Server or Load balancer

443

HTTPS

Unified Access Gateway Appliance

Remote Desktop

3389

RDP

Unified Access Gateway Appliance

Remote Desktop

9427

MMR or CDR
(TCP)

Unified Access Gateway Appliance

Remote Desktop or Application

4172

PCoIP
(TCP or UDP)

Remote Desktop or Application

Unified Access Gateway Appliance

4172

PCoIP
(UDP)

Unified Access Gateway Appliance

Remote Desktop

32111

USB-R
(TCP)

Unified Access Gateway Appliance

Remote Desktop

22443

HTTPS
(TCP and UDP)

Notes:

1 In VMware Horizon, when using PCoIP Secure Gateway on the Connection Server or Security Server.

2 When RDP protocol is tunneled through the Connection Server or Security Server.

4 If using Blast Secure Gateway

5 Not using Blast Secure Gateway

6 Standard encoded RMI

7 RMI over SSL

8 Port 80 here is optional , allowing a graceful redirect from http if a client uses this.

For large deployments, optimize the ephemeral ports and the TCB hash table size in the Windows operating system. Please see KB Configuring Windows Server 2012 to avoid port exhaustion with Horizon Connection Server (85667) for a specific example.

For more information, see the VMware Horizon View Architecture Planning Guide .

Notes:

Port 902 TCP must be open between View Composer service to each ESXi host. For more information, see the View TCP and UDP Ports section in the VMware Horizon View Security Guide .

Port 443 must be opened between vCenter Server and standalone View Composer.

Port 4172 UDP must be open in both inbound and outbound directions.

Port 4172 TCP needs to be open in an inbound direction only.

Port 5443 TCP needs to be open between View Client and Linux Agent, if Blast Secure Gateway is disabled.

Port 5443 TCP needs to be open between Security Server/Connection Server and Linux Agent ,If Blast Secure Gateway is enabled.

PCoIP also uses UDP port 50002 from Horizon Client or UDP port 55000 from the PCoIP Secure Gateway) to port 4172 of the remote desktop or application.

In Horizon 7.2 and later, TCP 32111 is required between Connection Servers in a replica group

Cloud Pod Architecture Port Requirements:

Port: 22389 - The Global Data Layer LDAP instance runs on this port. Shared data is replicated on every View Connection Server instance in a pod federation.

Port: 8472 - The View Interpod API (VIPA) interpod communication channel runs on this port.
We also need dynamic port range of 49152 through 65535 for RPC communication.

Tech Zone Reference:

Network Ports in VMware Horizon 7

Microsoft Reference:

TCP ports, UDP ports, and RPC ports that are used by Message Queuing

The above ports needs to be open between each connection servers of a pod

Related Information

For more information on VMware vRealize Operations Manager (formerly known as vCenter Operations) for Horizon View, see the vCenter Operations Manager for Horizon View 1.5 Security Guide.
Requisitos de conectividade de rede e de portas do VMware View
Requisitos de puertos y conectividad de red de VMware View
VMware View のポートとネットワーク接続の要件
VMware View 端口和网络连接要求
Check dedicated portal for ports

Detectable by VMware SkylineTM

Actions

Copy

link to clipboard
copied!

Print

Language:
Chinese (Simplified)Portuguese (European)JapaneseSpanishEnglish

Attachments

Additional Resources

KB
•
End Of General Availability of the Free vSphere Hypervisor (ESXi 7.x and 8.x) (2107518)

KB
•
Download and Install VMware Fusion (2014097)

Results 1-2 of 2

Ask The Community

Get answers quickly from VMware experts in the community

Post Subject

CONTINUE IN COMMUNITIES

Related Products:

VMware View Manager

VMware View

VMware Unified Access Gateway

VMware Horizon View

VMware Horizon

Related Versions:

VMware Horizon 8

VMware Horizon 7.x

VMware Horizon 7

Take Our Survey

Support Assistant