This option routes all user Internet-bound and in-guest traffic across the VPN to your organization’s network. You maintain the ability to allow all users to connect to Horizon Cloud Service through the Internet, over the VPN, or a combination of the two.
All in-guest traffic, such as desktop applications, authentication, DHCP, and DNS, as well as the Internet-bound desktop traffic, traverses the VPN and passes through your organization’s gateway. The Internet-bound traffic can then be subjected to any web filtering that you have in place. Protocol traffic for external users who are connecting to the desktops and RDSH servers passes through the Horizon Cloud Service gateway, which provides access through the Internet.
As shown in the figure below, this option increases the traffic over the VPN, but provides the business advantage of enabling full visibility and control over user and desktop activity. This configuration provides additional options to ensure the highest levels of security and regulatory compliance.