Problem with USB auto connect with clients that connect through the Security server...

Lack of VMware View 5.0.1 with 2 servers connection and a security server. When the clients connect directly to the server connection, USB connection works very well... users can use their USB drives and other devices with their VM. The problem occurs when they attempt to use their USB devices when negotiated through the Security server.

I know that port 32111 (TCP) must be open between the server security and the connection to the server, but even after doing so it does not always work... customers just to get the scrolling message of office in the USB menu initialization.

Our current facility is:

External IP address-> DMZ (Security Server)-> connect to server

Entrust us our firewall config through our ISP (we are not overloaded with scientists here, it's just me, so things like little help my work load). They are certainly not incompetent (or at least were not in the past). I had to open the external 32111 IP port to the DMZ, then of the DMZ to our connection server that is used for external connections. Everything about VMware View works perfectly for the clients that connect this way, but not USB devices.

One thing I give is if our having a configuration of VLAN dedicated for customers views influence what either. I'm trying to keep an eye on what ports are open that for our firewall for my records, but I do not see where I openly opened ports on the internal side of security server to our internal network. He must have the port opened directly from the internal face of security server of vmware 32111 discovers clients?

The firewall Guys tell me that they checked over and over that port 32111 is open throughout the. They also said that they tried to telnet 32111 to our security server port and have nothing back (should have gotten garbage at least according to them).

An idea of the next steps to take? It is obviously a blocked port, I just have no idea why at this stage.

I know that port 32111 (TCP) must be open between the server security and the connection to the server, but even after doing it still does not work

This is not what it takes. The agent is listening on the port 32111, you must open the firewall to allow connections to the Security server for the desktop on port 32111 (same thing you must allow RDP and PCoIP).

Mike

Tags: VMware

Similar Questions

  • View the connections of the server to connect to the Security Server 5.2

    So, I wonder if it is anyway possible to not expose a subnet of office to the DMZ during the deployment of a security server?  I think remember me, there was a way to have the tunnel of security server all traffic through the connection to the server, but for the life of me, I can't seem to understand.

    Even in your previous PoC you should always have allowed some ports (PCoIP, RDP if use you it and the frame channel) from the server security for virtual offices. This has always been the case.

    The role of the Security Server is to protect exposure of desktop to the Internet. It provides a monitoring of protocols of the Internet (for example PCoIP) so make it succeed to check if the traffic is in the name of an authenticated user, and to ensure that if it is valid, it is transmitted over an office whose user is authorized to access. It is important to configure your internal firewall so that Office (PCoIP etc.) protocols can come only security servers. Then you give the required insurance. If such packets only packets UDP PCoIP arrive in your DMZ that are not on behalf of an authenticated user and then they are ignored in the DMZ without ever be passed in your data center. You know that all protocols for virtual desktops have been validated by the Security server.

    The Security server should also communicate with the login server and that's why you should also allow JMS, AJP13, and IPsec through. These should be only to the servers again only from servers to security and connection.

    You can always route the PCoIP packages through a proxy in your data center, but the security required inspection happens before that the Security Server so that eventually they can be thrown into the demilitarized zone.

    Mark

  • problem with allowing msn games through the firewall

    Having problem to msn games through the firewall.

    Hi JohnLanham,

    The description of the problem seems a little unclear and I wish I had a better understanding before you start working on it. I appreciate if you could help me with more information.

    1. What is the problem exactly are you facing on MSN games?

    2. you receive an error message/code?

    3. firewall is blocking MSN games?

    If the firewall is blocking MSN games see this help article and check if it helps.

    Allow a program to communicate through Windows Firewall

    http://Windows.Microsoft.com/en-in/Windows7/allow-a-program-to-communicate-through-Windows-Firewall

    Response with more information to help you.

  • Lenovo Solution Center cannot connect to the Security Server

    Solution 2.8.005 Lenovo Center review 21092 reports an int guaranteed alert the Support section. Under warranty, a yellow wanring bar reports "Guarantee impossible to get the response from the server guarantee." In addition, an alert about products for registration is also reported in respect of the support. It reads 'Recording product that Lenovo Solution Center could not find your registration information'. These are the only two alerts by the Lenovo Solution Center.

    I finished the registration process. On support.lenovo.com, I can confirm that the Lenovo ThinkPad W520 is registered to me and it is out of warranty. Therefore, it is a defect in the Lenovo Solution Center.

    Is there a way to bypass this flaw, or repair by Lenovo?

    Lenovo released a Service TIP document a problem with Lenovo being unable to search feature security solutions Center.

    It can be found here: https://support.lenovo.com/us/en/documents/HT116724

    The solution is to visit the Web site of warranty directly. It can be found here: http://support.lenovo.com/us/en/warrantylookup

    Thank you

  • problem with image that disappears into the table-

    It's totally weird and I can't understand why it's happening.

    I'm new to DW8, even if I used a much older version of DW a lot.

    It doesn't matter how to create the header for http://www.amafca.org/convertedindex.htm, the image of the banner of the very top is getting stripped when I put the page online for tests.

    Currently, I use a table, where the img src is correctly listed as data in the table for that cell. Test perfectly locally. Can I use ACE FTP 3 to load the page on the test site. All graphics are where they are supposed to be. BUT... the top of the banner is not displayed! Looking at the source code, the "img src" link so that the cell is completely empty - the code was stripped of the page!

    How is that possible? ACE FTP is it? How and why? (I never even heard of a program ftp stripping code!)

    I guess I have to just move on and wading in get the DW set up ftp in order to use it for this test page and see if the info is always stripped. But everyone knows this sort of thing happening before?

    Thank you

    PAM to amafca

    I guess you run Norton and it freezes the image before he gets to the browser because you called banner. Rename it to something else and see if that helps. I can see the banner very well.

  • Not able to connect with the Security Server

    Hello

    IM setting up a demo with view 6 environment, and when I try to connect locally on the servers of connection it works fine, but when I try to connect to the Security server fails with the image below.

    pic1.jpg

    The Security server has 2 network cards, now in the DMZ and in production. I guess I should also be able to connect directly to the ip production, but the same error.

    We have disabled the firewall between dmz and prod for troubleshooting, but same problem.

    The image below is the Security Server, the addresses here are the ip 'internet', I guess it's true?

    pic2.jpg

    The image below is the connection to server 1, the addresses here are internal, and is the FULL domain name, if it was "internet ip" instead?

    pic3.jpg

    If I try on the spot to connect to the ip address of prod on security with internet server explorer, im able to connect, but when I select the office that it will fail "cannot display this page", then shows the 'internet' ip in the address field.

    I guess there is just something simple I've missed... hope you understand my question

    Thanks for the support.

    If you do not already have a look at this description of the display configuration, it covers remote access via security servers as well. Setting up remote access with a view PCoIP 4.6 and newer https://communities.VMware.com/docs/doc-14974

    I guess the fact that you can connect through the servers of connection that the URL you configured in the view administrator for servers in connection is a production local IP address/address?

    External security URL server is also an IP/address of DMZ / external can be solved?

  • I had problems with access to most of the Web sites and I noticed that HTTPS is no longer, how do I make permanent HTTPS so I can access any Web site?

    I had problems with access to most of the Web sites and noticed that HTTPS no longer appears whenever I try to access a Web site. I can easily connect to my gmail and facebook account, but the problem is that when I click on a link on FB and gmail, I get the annoying message "refused to connect.

    How to address this issue, rather how to make HTTPS permanent so I can easily access any Web site. The date and time on my laptop are both correct. I am currently using OS x 10.9.5.Please!

    How to address this issue, rather how to make HTTPS permanent so I can easily access any Web site.

    My guess is that you have a damaged or invalid certificate entry OS X KeyChain, but to directly answer this question, I would say that consider you something like HTTPS Everywhere. Note, it is not available for Safari. It is available directly through the Google Chrome browser extensions.

  • my computer recently crashed and when I tried to use photoshop, then I got the message: - message - problem with display driver, temporarily disabled the improvements. Does that mean, they will return when the problem is solved?

    My computer recently crashed. A fixed it but! When I then tried to use photoshop I got the message: - message - problem with display driver, temporarily disabled the improvements. Does that mean, they will return when the problem is solved?

    Update or restore your graphics driver.

  • Having a problem with a redirect virus and the refusal by the system to allow me to download various things, Windows Live Mail in particular.

    I recently tried to remove malware on my Vista based laptop Toshiba.


    I recently tried to remove malware on my Vista based laptop Toshiba. Malwarebytes helped, but I still have problems with a redirect virus and the refusal by the system to allow me to download various things, Windows Live Mail in particular. I tried to download from a copy of the USB stick to a clean computer, but he still refuses to load telling me to check my internet connection, which is fine for general use. Please help I get crazy and do not forget that I am a pure layman - thank you if you can help - Kidso

    I found that the best place to ask this type of question is here: -.

    http://forums.ComputerActive.co.UK/forumdisplay.php?f=20

    There are some very good people out there who helped me (successfully) on 2 occasions.

    Good luck.

    I'll be interested to know how you go.

  • Install KB3024777 to fix a problem with KB3004394 on Windows 7 and Windows Server 2008 R2 now not authentic

    Separated from this thread.

    Joachim

    When first pose the problem? Was it before or after the December updates?

    KB3004394 and KB3024777 appear in view update history? Or do they appear in installed updates?

    Gerry, thanks for your post. I have the same problem as Joachim started this thread. I am running Windows 7 sp1. I have a Dell computer and it's certainly a legitimate copy of Windows (confirmed computer 'properties' and it is enabled).

    By your post, I saw just to update and the KB3004394 (installed on 12/10/2014) and KB3024777 (installed on 12/12/2014) show as comfortable. I usually leave the Windows download updates automatically and I install them to stop. I watched the second update and according to Microsoft.com:

    Install KB3024777 to fix a problem with KB3004394 on Windows 7 and Windows Server 2008 R2

    The KB 3004394 update which was dated December 10, 2014 can cause additional problems on computers that run Windows 7 Service Pack 1 (SP1) and Windows Server 2008 R2 SP1. This includes the inability to install future updates. This new update is available to remove KB 3004394 from your computer.

    My problem is, as of today 14/12/2014, I still get the pop up "this computer is running not windows genuine', even with KB3024777 installed.

    Any thoughts?

    Thank you

    Bob C

    Right-click on CMD

    Click on run as administrator

    At the command prompt, type the following commands:

    slmgr.vbs - ipk xxxx-xxxx-xxxx-xxxx (to replace the specified in the current product key)

    xxxx-xxxx-xxxx-xxxx - represents your product key

    Press enter on your keyboard

    Then type: slmgr.vbs - ato (this will force the activation)

    Leave the command prompt

    Restart your computer

  • I have the problem with my language of keyboard, the fact is I can't add or remove languages from keyboard

    Hi all
    I have the problem with my language of keyboard, the fact is I can't add or remove languages from keyboard
    When I press the keyboard button change that nothing happens, but in the event viewer I get the following message
    The failing application name: Rundll32.exe_shell32.dll, version: 6.1.7600.16385, time stamp: 0x4a5bc9e0
    Name of the failed module: input.dll, version: 6.1.7600.16385, time stamp: 0x4a5bdf4f
    Exception code: 0xc0000005
    Offset: 0 x 0000000000003756
    ID of the process failed: 0xf5c
    Start time of application vulnerabilities: 0x01cd697d57b60837
    The failing application path: C:\Windows\system32\Rundll32.exe
    Path of the failing module: C:\Windows\system32\input.dll
    Report ID: 95fbd586-d570-11e1-8bfb-c860006d193a
    Can someone help me with this? or maybe there's another way to change the keyboard languages? for example through registry?
    Thanks in advance
    I HAVE Windows 7 x 64

    Hello

    I suggest to create a new user account and check.

    Create a user account.

    http://Windows.Microsoft.com/en-us/Windows7/create-a-user-account

    If the problem does not occur in the new user account, I suggest you to fix a corrupted user profile.

    Fix a corrupted user profile.

    http://Windows.Microsoft.com/en-us/Windows7/fix-a-corrupted-user-profile

  • Problem with adding new storage to the CDV provider profile

    Hi all

    I have problem with adding new storage to the CDV provider profile.

    My ENV:

    VCD Version 5.5 latest

    vCenter 5.5

    VCDDB - SQL

    I created the environment with two profiles of storage for the first time and it's work well (the storage profile created before I joined the vCenter on the VCD)

    I created tags and he attributed to the data store and I see the new VM storage through the vSphere web client policy.

    I can also see VMS on the VCDDB the dbo.storage_profile_inv the new storage policy table and when I create new provider TDC I can't.

    What I'm trying:

    1 Refresh the storage via the VCD (right click on the attached vCenter) profile

    2. restart the inventory and the profile based on the vCenter servers

    3. restart the VCD and vCenter servers

    Help, please

    You can just follow KB 2075366.

  • Problem with his comments before signing the PDF.

    Problem with his comments before signing the PDF.

    My problem is with sticky notes that I need to use my comments frequently.

    When I place my signature and save document commented, disappear all pop-up windows and icons of sticky notes go "flat" of the document.

    It's the same with all the annotation tools and pop ups disappear if I use them with.

    Is there a way to keep comments and pop-ups 'living' signing and recording after his comments?

    Fig 1: commented the document before you sign and save.

    Photo 2: after you save the signed document. Pop - ups disappeared and sticky notes are here to stay.

    Hey Tomi,

    It was a typo on the part of Ajlan. It was supposed to read "Lock after signing the Document. Please see the screenshot below. However, this check box only appears in the dialog box sign the Document If you sign the last signature on the PDF field. If you don't, it's because there are other unsigned signature fields.

    Steve

  • Problems with sorting of columns and the number of lines in the report

    Hello

    I'm having a problem with sorting of columns and the number of lines displayed in a report.

    This report displays the data correct, but if I try to sort on a column when I click on the column heading in the report returns no line... I need to click on the "go" button to refresh the report (with the column sorted now) in to display the data.

    Similarly, I display only 15 lines per page. If I try to view the lines 16-30, 31-45, etc., that it returns no line until I click on the 'go' button to refresh again.

    Has anyone else had (and overcome) the same problem?

    Thank you

    Joseph

    Joseph,

    2 questions:

    1) are you using the elements referenced by the report page to filter etc.. ? If so, you're failing values of these when the loading of the page?
    (2) are you using PPR page through the results?

    If so, it could be a problem with the different types of session state, as Anton Nielsen blogged about here:
    http://c2anton.blogspot.com/2008/12/Oracle-Application-Express-Apex-three.html

    If so, you can use calculations or processes to set element values in session state persistent during page rendering, as Anton mentions. In this way, when you use PPR page values will be available in session state and your report should work fine.

    Anthony.

  • Problem with "Filling space" described in the Blog of Tim

    Dear Experts,
    I use the invoice template described in the excellent Blog of Tim Dexter (Anatomy of a model) to produce my own version. However, I have problems with the 'fill' space as described here: http://blogs.oracle.com/xmlpublisher/2007/03/anatomy_of_a_template_ii_heade.html

    My model is almost identical to the example, when I import XML data when there is only a single folder, fill space have not not cushion with enough blank lines so that the Total of the table at the bottom of the page, does not correspond with the watermark that I. The code in the field "Fill the space" is as in the Blog:

    <? If: not (count ($invLines) mod $lpp = 0) and ($start + $lpp > count ($invLines))? > <? for each: $invLines? > <? If: position() < $lpp - (count ($invLines) mod $lpp)? >


    If the number of records is greater than half a page or more, then the padding is correct. This is even if the word to say on the third page, it is a single record. Therefore, it seems that the padding does not work if the number of records is less than half a page total.

    Is this correct and what someone have a solution - would be greatly appreciated.

    Thank you very much
    Mark

    Hi Mark,

    I had problems with this earlier. See the comments on the bottom of the blog post you linked to above. The problem is down to the filling loop is a variable containing the invoice-based. If the number of invoices in this recordset is not sufficient to provide all the required filling lines, the formatting goes belly up.

    For loop in the XSLT file, you must use models of void. I got it going with my report using the code here:

    http://www.IBM.com/developerWorks/library/x-tiploop.html

    Basically you call recursively model for the number of required fill lines. A lot of effort but far as I could tell, the only solution given the available technology.

    I hope this helps.

    Jon.

Maybe you are looking for

  • Airport Express - no internet if audio cable is connected

    Hello I have an Airport Express for several years already and it worked perfectly fine for me until today. I didn't know that the internet connection has stopped working. After trying different things, I realized that the internet connection works wh

  • Accented characters on mail bug?

    For a few days now, I encountered the following problem: when you type a character accentuated on the e-mail program (by holding down the key of the desired seconds letter), it freezes the keyboard and I can't continue to type at all. It is new and h

  • What can I do about 48 error during the update of the iphone 4S?

    What can I do about 48 error during the update of the iphone 4S?

  • Z580 wifi replacement

    Hello! I would like to change my wifi with a processor Intel, one adapter. If I do that I lose my warranty? Is that the laptop accept the other except its default wifi adapters?

  • Configure shared variable programmaticaly

    Hello I use the Variables Sared unique process in an application of the RT, and I would like to configure parameters programmatically, like FIFO RT (FIFOs, bays, number of items in the table number). If someone can explain to me how to set these sett