topic Re: changing default ports on UAG in Horizon Desktops and Apps

changing default ports on UAG

jayji831 — Mon, 16 May 2022 02:00:28 GMT

I want to change the default port from 443 for Horizon login on UAG to 4443.

I did change the port 443 to 4443 on Horizon Connection Server already.

But UAG still listens to 443 port for Horizon login.

Any idea?

Re: changing default ports on UAG

mrkasius — Mon, 16 May 2022 07:15:30 GMT

Hi @jayji831 ,

You can change the port in the UAG Admin UI

In the Configure Manually section of the UAG Admin UI, click Select.
In the General Settings section, for Edge Service Settings, click Show.
Click the Horizon Settings gearbox icon.
Change the Connection Server URL to https://<ip address>:4443

Re: changing default ports on UAG

jayji831 — Mon, 16 May 2022 07:33:40 GMT

Thank you for your reply.

I tried that already.

Connection server listens to 4443 as changed and it works when connecting to the connection server directly.

But UAG still works with 443 even though I changed it to 4443.

Re: changing default ports on UAG

mrkasius — Mon, 16 May 2022 07:44:27 GMT

Did you also change the Blast External URL and Tunnel External URL to :4443?

Re: changing default ports on UAG

jayji831 — Tue, 17 May 2022 00:09:06 GMT

No. Not yet. I have it as default.

But I think changing Blast ports doesn't have anything to do with it because I can't even access to horizon login prompt with port 4443 that I changed.

Re: changing default ports on UAG

Mickeybyte — Wed, 18 May 2022 09:28:09 GMT

I don't think you will be able to change that port for authentication. Not in a supported way I think.

Are you using NAT to forward incoming connections to the UAG? If so, you could do <externalIP:4443> <NAT-TO> <UAGIP:443>.

Re: changing default ports on UAG

shcho_korea — Thu, 19 May 2022 02:41:36 GMT

I appreciate Jay for researching this topic on behalf of me.

Also, thanks for your thoughtful comments, guys.

I even tried manipulating the basic listening port with reinstalling an UAG with an option like the following screenshot, which ended up with no luck.

I will conclude that this is not possible without any additional layer like NAT as Mickey mentioned.