VMware Horizon View Client - Proxy Settings

[murraypaul]

Hi,

I am using VMware Horizon View Client version 3.4.0 build-2769709 and having issues with the proxy configuration.

Using Windows 7, does it use the pac file configured in Internet Explorer? If there is a proxy server configured, does it use it? I have settings by simply specifying the pac file and the connection to the server continually times out, however when manually specifying the proxy server, I am able to connect, however not every time.

This leads me to suggest, it does not support the use of a pac file. During testing the IT Support Team created a pac file that directed all traffic to the proxy regardless of rules and it still failed to connect to the server -simply timing out.

Can anyone shed some light on this and if there is a way round it by forcing it to use the specified pac file?

Thanks,

Paul

[vTimD]

I experienced the same kind of issues with my Horizon clients. By default, it does use the proxy configured for IE. My Horizon clients do not play well with the .PAC file. As for if it is officially supported or not, I couldn't tell you. I just bypass it. There is a KB article that you can find below that shows you how you can set the Horizon client to bypass the proxy configured by IE:

http://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=100923...

[GaryMclean]

I have just seen the same issue on 5.3.2

It gets so far when logging in via the Horizon client, but fails to connect after the authentication.

If I Set the IE Proxy setting i.e. FORCE ALL traffic to a proxy, it works. If I let it use the pac file, it trys to connect direct to the security server.

If I force IE to Use a proxy (NO PAC) it does work

I need to log a call on this one

[pwy]

Hello

Did you find a solution so that the traffic through the Proxy works?

Greetings Chris

[pengwang]

Hi all,

Could you please use the latest View horizon client 4.4 which enhanced the proxy around pac and support proxy fail over.

Please comment if you still got issues.

Thanks!

[davebaker87]

Hi - did you get an answer on this? I've got same issue w/ Horizon client 5.3 running with a PAC file. It simply doesn't work. By explicilty configuring a system proxy, it does work.

[pengwang]

Hi davebaker87,

Could you please attach client full level logs/pac file/screenshots/wireshark logs? For client logs refer to https://kb.vmware.com/s/article/1017939#windows-horizon-clients

Redact information that you concerned or reach out to vmware technical support, Thanks!

[davebaker87]

Hi

We've submitted client level logs and PAC files to support. Below is their initial diagnosis. We will provide more logs today.

From a client with PAC file configured (fails):

2020-02-14T13:37:58.244+00:00 INFO (5E64) [libcdk] CdkProxy_GetProxyForAutoSettings: Call WinHttpGetProxyForUrl for external.uag.com.
2020-02-14T13:37:58.245+00:00 INFO (5E64) [libcdk] CdkProxy_GetProxyForAutoSettings: Failed to get WinHTTP proxy info with error 0x00002ee6.
2020-02-14T13:37:58.245+00:00 DEBUG (5E64) [libcdk] CdkUtil_StringToAddress: Failed to get addr info with family 23: error=11001.
2020-02-14T13:37:58.245+00:00 DEBUG (5E64) [libcdk] CdkUtil_StringToAddress: Failed to get addr info with family 2: error=11001.
2020-02-14T13:37:58.277+00:00 DEBUG (5E64) [libcdk] CdkUtil_StringToAddress: Failed to get addr info with family 0: error=11001.
2020-02-14T13:37:58.277+00:00 ERROR (5E64) [WinCDK] PCoIPWindow::CreateRemoteWindow : The type of address external.UAG.com is unknown, could be invalid.
2020-02-14T13:37:58.277+00:00 DEBUG (5E64) [WinCDK] DesktopWindow::Connect : Creating remote window failed.  Posting generic error message.

With manual proxy configured (successfuk)

2020-02-14T13:25:55.385+00:00 INFO (2064) [WinCDK] PCoIPWindow::CreateRemoteWindow : Launching RemoteMKS with BLAST protocol, launchitem is: 'PSmartDesktop' ('cn=1a696234-f7f7-4510-9d65-0602549b58a9,ou=entitlements,dc=vdiglobal,dc=vmware,dc=int')
2020-02-14T13:25:55.388+00:00 INFO (2064) [libcdk] CdkProxy_GetProxyForAutoSettings: external.uAG.Com
2020-02-14T13:25:55.390+00:00 INFO (2064) [libcdk] CdkProxy_GetProxyForAutoSettings: Failed to get WinHTTP proxy info with error 0x00002ee6.
The following business is to handle the static proxy.
2020-02-14T13:25:55.390+00:00 INFO (2064) [libcdk] CdkProxy_GetProxyForUrl: Evaluate a semicolon-delimited proxy bypass list for external.UAG.com.
2020-02-14T13:25:55.390+00:00 DEBUG (2064) [libcdk] CdkProxy_RetrieveProxyName: The proxy name is : '10.33.241.200:8080'.
2020-02-14T13:25:55.390+00:00 DEBUG (2064) [libcdk] CdkProxy_RetrieveHttpsProxy: Find proxy: '10.33.241.200:8080'
2020-02-14T13:25:55.390+00:00 DEBUG (2064) [libcdk] CdkProxy_RetrieveHttpsProxy: Get Https proxy '10.33.241.200:8080' and use the same proxy forall protocols.
2020-02-14T13:25:55.391+00:00 INFO (2064) [libcdk] CdkProxy_GetProxyForUrl: Found windows proxy string: '10.33.241.200:8080'.
2020-02-14T13:25:55.391+00:00 INFO (2064) [libcdk] CdkProxy_HandleFailover: Will go through failover proxy chain: '10.33.241.200:8080'.
2020-02-14T13:25:55.391+00:00 DEBUG (2064) [libcdk] CdkDnsLookup_ResolveAddress: Server name 10.33.241.200 is resolved as 10.33.241.200 for IPv4.
2020-02-14T13:25:55.391+00:00 DEBUG (2064) [libcdk] Starting peer reachability check: CdkConnection_CheckPeerReachabilityImpl: host ip list : 10.33.241.200, tcp port 8080, udp port 0, tcp connect count 1, udp send count 0
2020-02-14T13:25:55.391+00:00 DEBUG (9650) [WinCDK] UdpProxyLogger : udpProxyLib: VTHREAD 38480 "vthread-38480"
2020-02-14T13:25:55.391+00:00 DEBUG (9650) [WinCDK] UdpProxyLogger : UDPProxyCreateTestData: Hostlist = 10.33.241.200, v4 address count = 1, v6 address count = 0
2020-02-14T13:25:55.391+00:00 ERROR (2064) [libcdk] CdkConnection_CheckPeerReachabilityImpl: peer reachability check returns 1 with error 0.
2020-02-14T13:25:55.391+00:00 DEBUG (9650) [WinCDK] UdpProxyLogger : UDPProxyCreateTestConnectionData: Create test data for hostAddress = 10.33.241.200 with connection Type = 0
2020-02-14T13:25:55.391+00:00 DEBUG (9650) [WinCDK] UdpProxyLogger : UDPProxyCheckTCPPeerReachabilityImpl: Request to test TCP peer reachability to 10.33.241.200:8080
2020-02-14T13:25:55.391+00:00 DEBUG (9650) [WinCDK] UdpProxyLogger : udpProxyLib: SOCKET creating new IPv4 socket, connecting to 10.33.241.200:8080 (10.33.241.200)
2020-02-14T13:25:55.418+00:00 DEBUG (97A0) [WinCDK] UdpProxyLogger : UDPProxyPeerTestConnectCallback: Peer reachability response for successful connect for 10.33.241.200:8080, connection type = 0
2020-02-14T13:25:55.418+00:00 DEBUG (97A0) [libcdk] CdkConnection_CheckPeerReachabilityCb: TCP reachable for 10.33.241.200:8080.
2020-02-14T13:25:55.491+00:00 INFO (2064) [libcdk] CdkProxy_HandleFailover: Will use proxy '10.33.241.200:8080'.
2020-02-14T13:25:55.491+00:00 INFO (2064) [WinCDK] PCoIPWindow::GetSystemProxyForBlastConnection : The proxy '10.33.241.200:8080' is applied to the blast external.Uag.com'.
2020-02-14T13:25:55.491+00:00 DEBUG (2064) [libcdk] CdkUtil_StringToAddress: Failed to get addr info with family 23: error=11001.
2020-02-14T13:25:55.491+00:00 DEBUG (2064) [libcdk] CdkUtil_StringToAddress: Failed to get addr info with family 2: error=11001.
2020-02-14T13:25:55.520+00:00 DEBUG (2064) [libcdk] CdkUtil_StringToAddress: Failed to get addr info with family 0: error=11001.
2020-02-14T13:25:55.520+00:00 ERROR (2064) [WinCDK] PCoIPWindow::CreateRemoteWindow : The type of address external.UAG.com is unknown, could be invalid.
2020-02-14T13:25:55.520+00:00 WARN (2064) [WinCDK] PCoIPWindow::CreateRemoteWindow : Use FQDN 'external.uag.com' to try the Blast connection.
2020-02-14T13:25:55.545+00:00 INFO (2064) [WinCDK] FolderRedirectionManager::InitAutoRedirect : Init folder auto redirect settings.
2020-02-14T13:25:55.545+00:00 INFO (2064) [WinCDK] FolderRedirectionManager::SubscribeCDRCapabilityChange : Init folder redirection capablity tests.
2020-02-14T13:25:55.545+00:00 INFO (2064) [WinCDK] GeolocationRedirectionManager::InitPermRequest : Init geolocation permission request settings.
2020-02-14T13:25:55.545+00:00 DEBUG (2064) [WinCDK] PCoIPWindow::CreateRemoteWindow : Get unity mgr: 06ACBC88.

We are going to try adding the IP address of our external.uag.com into the PAC file instead. A second test will be to use the A record address, currently external.uag.com is a cname.

more to follow -

Any ideas?

[davebaker87]

This has been fixed by VMWare and plans to be included in the 5.4 client release in March 2020.

Senior tech's identified that, within the PAC file, the URL for our proxy server was not being interpreted to include https:// in the address string. Although the entry in the PAC used an FQDN.  We were provided with a sandbox version of the client, which worked, and are hoping a patch or remedial fix will be provided.

Thanks for the support. But I won't gives thanks for the headaches it caused getting to this point...