Large amounts of Traffic using port 4172

[me6093]

We have a Dell Wyse client at a remote location. The remote location has a sonicwal and so does our main office. We have a site to site vpn established.

We are running Vmware Horizon 7, Esxi 6.5, Secuirty Server in our main office. This one particular Wyse Client (remote office) at 6:00 PM transmitted 600 meg of data from our wyse client (Physical hardware/ip address) to our Horizon 7 server. The traffic was flowing over port 4127. Normally this wouldn't be a problem but this remote site is using a cellular internet router. So tyring to keep traffic as low is possible is a priority. The funny thing is that i know for a fact no one was in that remote office and the users states he shut his wyse client off.

Can anyone give me some guidance on this?

Thanks

Mike

[Magneet]

was it from the client to the server or the other way around? 4172 is the pcoip protocol so it sounds like regular View trafic

[HussamRabaya]

you can control the PCOIP traffic by:

1- AD template of "View PCoIP General Session Variables"

View PCoIP Session Variables – pcoip.adm – Contains policy settings related to the PCoIP display protocol.

View PCoIP Client Session Variables – pcoip.client.adm – Contains policy settings related to the PCoIP display protocol that affect Horizon Client for Windows.

please check Configuring PCoIP session variables (1014686) | VMware KB 

2- minimize the Scanning , printing and Multimedia (HD multimedia , YouTube )

use printer , USB and scanner redirection as it will compress the files

3-disable Audio, Analog audio, HD audio in Wyse thin/Zero client which is enabled by default

[me6093]

The Traffic is from a WYSE client to the server. However there is no one at the site during that time

[Lionel]

usually I see that kind of traffic when someone is burning a DVD or something. did the customer upload large files from a thumb drive or DVD to his Virtual desktop?

[HussamRabaya]

be sure to minimize timer to logoff the session after disconnect

then in Wyse config file add below

Inactive=10

nosessiontimer=1   

AutoSignoff=yes

Shutdown=yes

signon=0

If the user is inactive for 10 minutes the terminal shuts down. If no user ever logs into a session the terminal shuts down after 1 minute.