With the USB over Session Enhancement SDK feature you do not need to open TCP port 32111 for USB traffic. This feature is supported for both virtual desktops and published desktops on RDS hosts.
To enable the USB over Session Enhancement SDK feature, open the Windows Registry Editor (regedit.exe) on the remote desktop, navigate to HKEY_LOCAL_MACHINE\SOFTWARE\VMware, Inc.\VMware VDM\Agent\Configuration, and set the UsbVirtualChannelEnabled key to true.
When this feature is enabled, USB traffic might use the TCP or Blast Extreme Adaptive Transport (BEAT) connection that the display protocol uses, or it might use a dedicated TCP or BEAT connection. The connection that USB traffic uses depends on your configuration.
For example, with the VMware Blast display protocol, USB traffic might use the VMware Virtual Channel (VVC), the BEAT side channel, or the TCP side channel. With the PCoIP display protocol, USB traffic uses only the TCP side channel.
By default, the TCP side channel uses TCP port 9427. The VVC and the BEAT side channel use the same port as the VMware Blast display protocol.
USB counters displayed using PerfMon on Windows agents are valid if USB traffic is configured to use the VVC.
For information about using the BEAT side channel for USB traffic with VMware Blast, see Activate the BEAT Side Channel for USB or Client Drive Redirection.