Hi, @LeHongTung 

This is the communication flow when PCoIP/Blast Secure Gateway is not used, but when PCoIP/Blast Secure Gateway is used, the communication from the Connection Server onward is also encrypted, so it is safe.

https://techzone.vmware.com/resource/network-ports-vmware-horizon#about-this-guide:~:text=external%2...

So, I think your opinion is correct.