Horizon AppStack and windows firewall

[mboye_grundfos]

Hi.

I am currently trying to install Ansys with AppVolume 4. On first launch of e.g. Ansys workbech the application will ask to have ports open in firewall for license server communication, etc.

Our Security department requires that Windows Defender is enabled on the VDI desktops, so disabling firewall in the golden image is not an option.

What is the best practices / recommendation for configuring the firewall rules? I have searched the internet, and this forum with getting any wiser

Should I do it with DEM, configure directly in golden image, or as part of app stack?

Horizon version: 2212

VMware ESXi: 7.0.3, 21424296

APP VOLUMES 4, VERSION: 2212.2 (4.9.2.18)

DEM version: 2212

 Let me know if additional information is needed.

BR.

Mads.

[TomH201110141]

I would do it with a computer policy in AD. 

I have never tried to do with DEM. I think it’s not that intuitive like doing in group policy editor in AD. 

[RetouwNL]

isn't it mostly that it's the incoming firewall that is blocked and not outgoing? I would do it in dem for flexibility so you can use the admx template with the correct app group. Usually for sucn an app you would only be required to open a firewall port on the license server and not the application side.