Horizon Unified Access Gateway

VMware Horizon Unified Access Gateway, previously known as Horizon Access Point and first introduced in VMware Horizon 6.2, is designed to provide strong authentication, and secure access, for Horizon clients connecting from outside the organization's private network. The diagram in the previous section shows the placement of a Horizon Unified Access Gateway within a DMZ environment, as is typical since it performs similar functions to Horizon Security Server.

Unified Access Gateway is packaged in Open Virtualization Format (OVF) and is deployed on vSphere as a hardened, pre-configured Linux-based virtual appliance. Horizon Unified Access Gateway is provided as an option to Horizon Security Server and, like Security Server, it is only required if providing access for external clients. it is designed to be installed in a DMZ, and multiple appliances may be installed to ensure high availability and load balancing. Chapter 5, Implementing Horizon Unified Access Gateway, provides the information needed to install and configure a VMware Horizon Unified Access Gateway.

VMware recommends that customers using Security Server today may continue to do so, but they have also indicated that Unified Access Gateway is their primary focus moving forward. New deployments may wish to future-proof their Horizon installation by selecting Unified Access Gateway, as VMware has indicated that Security Server will be deprecated or possibly even phased out in a future Horizon release. Additionally, Unified Access Gateway supports all of the latest Blast Extreme client protocol features, can be deployed (or redeployed) very quickly and with minimal effort, requires fewer ports to be opened between the DMZ and the internal network, and does not require tunneling or secure gateway to be configured on the internal Connection Servers.
上一章目录下一章