We have an external URL connection into our Horizon View.  That connection is NAT'd to our Load Balancer (NSX edge and configured for SSL passthru).  My networking guy is assuring me that ports 443, 8443, and 4172 are allowed thru.  I can conect thru a browser externally and log in to the portal and select a desktop pool.    However, when I try to connect thru the client (after putting in credentials). I see the portal with the pool Icons, but then I get a 403 access denied error.   I went back to ask the networking guy if there could be ports not getting thru and he again assured me that if there was a firewall issue, I would be getting a timeout error and not a 403 error.  This load balancer has two UAGs within it pool.  Each UAG is currently paired with the same connection server.  Now, I can connect to the external URL of each UAG and log in with no issue with the client (getting as far as getting the desktop).  Just not thru the load balancer.