Re: VDI Remote access via Internet Zero Clients - Security Server - Drops

Hi vmmaj

If connections drop only for users having weak internet connection and not for others, it means horizon environment is fine.You may also check zero client compatibility guide with horizon https://www.vmware.com/resources/compatibility/pdf/vi_view_guide.pdf

You can tweak pcoip settings for varying network conditions like you can set pcoip max bandwidth floor, turn off build to lossless feature etc. Modifying these settings can improve an end user's VDI experience with constraint network condition:

PCoIP Bandwidth Settings

You can also check https://virtualizationreview.com/articles/2019/06/14/drilling-down-on-pcoip-settings-on-vmware-horizon-77.aspx

Answering to your second question,UAG is far superior than security server. Below are the advantages of using UAG over security servers:

View Security Server    

Has dependency on Windows OS, can always has security concerns.

Needs one to one mapping with connection server.

Does not support other EUC products.

Unified Access Gateway

• Linux Appliance, More secure.
• No need of one to one mapping to connection server, we can map to a VIP
• It can support Airwatch, Horizon View,VIDM.
• It is easy to install and deploy instead of security server. UAG has very nice GUI to manage.
• It is possible to separate traffic, you can have a UAG with 1 NIC, 2 NIC’s or 3 NICS, where with 1 NIC it is the same situation with a Security Server. 2 NIC’s you separate DMZ Internet with DMZ Internal Traffic (where internal/management traffic is over 1 Interface (NIC). And 3 NIC’s where every part has its own network, 1 NIC for DMZ Internet, 1 NIC for DMZ Internal Traffic and 1 Interface for DMZ Internal Management Traffic. So every part is separated and thus more secure.
• When you have the UAG up and running, you can export the configuration. Whenever the appliance breaks due to mistakes, security breaches or whatever, you deploy a new UAG and import the Configuration.
• When you need to upgrade the appliance, you can do an in-place-upgrade, or just roll-out a new version and import the configuration as simple as that.