splittgerb wrote:
The PCoIP of 4172 UDP/TCP in both directions is a must between the VDI Desktop subnet and the Security server in the DMZ.
Yes, that's what step 3 says and what I have highlighted in my reply (3 posts ago). Quite a few people don't correctly configure step 3 (or miss step 1 or 2). This will certainly result in a black screen.
Just to correct you slightly though, the TCP 4172 connection is never made outbound (from desktop to Security Server and Security Server to client). It is always inbound. It is the UDP 4172 traffic that is in both directions.
The rules for PCoIP need to be *exactly* like this:
3. Update the firewall to allow PCoIP to pass through. This is:
PCoIP between View Client and Security Server
- TCP destination port 4172 from Client to Security Server
- UDP destination port 4172 from Client to Security Server
- UDP source port 4172 from Security Server to Client (this is the reply UDP data)
PCoIP between Security Server and virtual desktop
- TCP destination port 4172 from Security Server to virtual desktop
- UDP destination port 4172 from Security Server to virtual desktop
- UDP source port 4172 from virtual desktop to Security Server (this is the reply UDP data)
Mark