SurajRoy Tracker

Re: Work from home with workspace one

SurajRoy — Tue, 18 Jul 2023 16:27:20 GMT

VMware Horizon include Virtual Desktops where as WorkSpaceONE is centralized platform for SSO to multiple apps like salesforce, O365 including Horizon VDI desktop.

https://www.surajroy.com/

Re: UAG redirecting to internal address of connection server

SurajRoy — Mon, 17 Jul 2023 16:27:24 GMT

Make sure on the Connection server the Blast External URL is disable.

All the Tunnel settings on the connection server should be unchecked.

Re: UAG Load balancer

SurajRoy — Mon, 17 Apr 2023 14:17:53 GMT

Both the UAGs can work at the same time. If it is not working, it could be an issue with LB or UAG configuration itself

Please refer to this https://techzone.vmware.com/resource/load-balancing-unified-access-gateway-horizon

Suraj Roy

https://www.surajroy.com/

Re: External User Not Redirecting from UAG to VC using HTML Access

SurajRoy — Mon, 12 Dec 2022 19:24:06 GMT

Can you share the topology of the environment?

Also is UAG pointing to specific connection server or CS Load Balancer URL?

Re: Horizon Client - Access Denied after implementing MFA on UAG

SurajRoy — Mon, 12 Dec 2022 19:20:15 GMT

In order to isolate the issue, I would recommend the following:

Point UAG1 to Connection Server 1 ( Destination URL under Edge Settings)
Point UAG2 to Connection server 2
Then use IP address of specific UAG and check if the issue is reproducible.

DNS Round Robin is not a best solution. Client send "Set Last User Activity". If there is not session persistence the DNS RR may route to incorrect UAG or Connection server after DNS cache is timedout and will cause the issue.

Re: SERVER_FAULT_FATAL error deploying instant clones in Horizon 8

SurajRoy — Mon, 26 Sep 2022 17:45:01 GMT

Thank you for the information.

Intermittent issue are always challenge to troubleshoot

We may have to check the ClonePrep / Customization log inside the agent machine to find the cause of the issue.

The OS Optimization Tool should have taken care of removing the Appex Packages which might cause customization timeout issue.

However, we still need to look at the logs for the actual reason.

Also check in VC if it get the valid IP address and DNS name. If not you can follow the KB: https://kb.vmware.com/s/article/2147129

Re: VMware Horizon View UAG Access Lists

SurajRoy — Mon, 26 Sep 2022 14:16:25 GMT

I dont think UAG has the capability ( currently) to define Access List based on Mac Address.

However, you can check the Connection Server Restriction Feature.

Refer to https://docs.vmware.com/en/VMware-Horizon-7/7.13/horizon-cloud-pod-architecture/GUID-61B2727E-DFFC-45BB-92D0-197439F19A41.html

NOTE: You can implement the above without Cloud Pod as well.

Create separate Pool for internal and external users.

Set Connection Server Restriction on the External Pool and define 1 specific CS for external use.

Point the UAG to External Connection server..

Re: SERVER_FAULT_FATAL error deploying instant clones in Horizon 8

SurajRoy — Mon, 26 Sep 2022 14:09:21 GMT

Are you using ClonePrep or SysPrep for Customization?

Is the Master image optimize?

Re: Need Help with Inaccessible VMs

SurajRoy — Mon, 26 Sep 2022 13:51:25 GMT

Are all ESXi hosts are up and running?

Are all datastores accessible by esxi hosts?

Re: Windows 10 Proxy settings

SurajRoy — Mon, 26 Sep 2022 13:38:25 GMT

Refer to https://communities.vmware.com/t5/Dynamic-Environment-Manager/UEM-IE-Proxy-Config/td-p/1397845

Re: VMware Horizon Teams audio

SurajRoy — Mon, 26 Sep 2022 13:36:30 GMT

Is the issue reproducing in Windows Client Machine?

Is the issue reproducible on both Pcoip and Blast?

Re: Horizon Client 8.6 Drops Connection Through Gateway

SurajRoy — Mon, 26 Sep 2022 13:33:25 GMT

Thanks for the finding.

Yes, from the event it seems the heart beat either not being send to the connection or not to the correct connection server.

if the issue is not happening with older view client with same setup but happening with new 8.6, would recommend to open ticket with VMware support to file bug if any.

Re: Horizon Client 8.6 Drops Connection Through Gateway

SurajRoy — Thu, 22 Sep 2022 17:42:56 GMT

Could you please share the below logs:

Client Log
UAG Log bundle ( Debug enable)
Connection server
Time Stamp when issue happen.

Re: Horizon Client 8.6 Drops Connection Through Gateway

SurajRoy — Thu, 22 Sep 2022 17:19:40 GMT

Is the is issue reproducible if the traffic goes directly to one of the issue.

NOTE:

Client send "Set Last User Activity" at specific time set and expect that it goes to the same UAG or Connection server who initially received the request when user tried to login.

If LB/VIP or DNS RR failed to send the request to same UAG/Connection server, the session will expired and end user need to login.

Refer to https://kb.vmware.com/s/article/56636

Action Plan:

Map UAG1 > Connection server 1

Map UAG2 > Connection server 2 and then test.

The above is recommended deployment option.

Also if the issue is not reproducible if we use specific UAG URL or IP address and we may need to look at DNS RR or View Client log.

Re: Your session has expired. Please re-connect the server.

SurajRoy — Thu, 22 Sep 2022 14:43:19 GMT

This issue can be seen mostly if the initial connection is going through Load Balancer to VIP.

If the connection is made directly to the Connection server IP / FQDN or UAG IP, it work fine.

Lets understand:

The client sent "Last User Activity" parodically to the connection sever after specific set of time.
Assume the LB as session timeout of 15 mins and Connection server or UAGs are being Load balanced.
Client made Connection VIP and request goes to UAG1 or Connection Server1.
After 15 mins, LB session timeout happened.
At 25th min client send last user activity or heart beat to VIP. This time VIP re-route to Connection server2.
Connection server 2 is not aware of the initial session and say, session expired.

Please give kudos if it help
https://www.surajroy.com/

Re: Horizon Client 8.6 Drops Connection Through Gateway

SurajRoy — Thu, 22 Sep 2022 14:17:43 GMT

I need below info to understand the step up:

How many UAGs are there ( 1 or 2)?
Are we using DNS Round Robin to Load balance between UAGs?

Sending Selective Logs to Syslog server

SurajRoy — Wed, 11 May 2022 17:57:20 GMT

Is there a way to send only below logs to Syslog server.

var/log/auth.log
var/log/shell.log
var/log/esxupdate.log

Re: Sound stuttering inside of VMware Horizon View

SurajRoy — Mon, 18 Apr 2022 17:28:40 GMT

You can install Teradici Audio driver on the Master image and provision a test pool or Test VDI machine and check.

https://docs.teradici.com/find/product/zero-clients/current/virtual-audio-driver

make sure the default audio device is set to Teradici

Re: Instant Clone gold image snapshot prep & Losing trust relationship with domain

SurajRoy — Thu, 14 Apr 2022 03:39:29 GMT

Great!

Re: Instant Clone gold image snapshot prep & Losing trust relationship with domain

SurajRoy — Wed, 13 Apr 2022 18:53:27 GMT

Yes.

Please try and let me know if it works.