Problem accessing VMware View (formerly VMware Virtual Desktop Infrastructure VDI)

Products

• ProxySG Software - SGOS

Issue/Introduction

VMware View / Virtual Desktop Infrastructure VDI utilizes a thin app to create a tunnel for the proprietary traffic to go through. When the proxy intercepts that tunnel and tries to interpret it as HTTPS, the application will break because it is not HTTP over SSL.

 

Resolution

The workaround is to have "Detect Protocol" enabled but not to intercept it as SSL.

Apply the following CPL Policy into your local policy

Login to the Management Console > Configuration > Policy > Policy Files > Policy Files Tab;

- Select the drop-down for “Install Local File from:” and select Text Editor then click install

Note : You need to replace the URL & IP address in the CPL below to match the domain you are trying to access and it's IP address

- Copy the CPL below in notepad, replace the "mydomain.com" and "xxx.xxx.xxx.xxx" with your own, paste that new CPL code at the end of your local policy file, then click "install"

                                  
;define the condition       
define condition VMVDI
url.domain="view.somesite.com"    url.port=443
url.domain="xxx.xxx.xxx.xxx"    url.port=443
end

;apply the action
<proxy> condition=VMVDI
http.method=CONNECT detect_protocol(yes)
client.protocol=ssl detect_protocol(yes)

<SSL-Intercept> condition=VMVDI
ssl.forward_proxy(no)
;-----------------------------------------------------------------------