With the USB over Session Enhancement SDK feature you do not need to open TCP port 32111 for USB traffic. This feature is supported for both virtual desktops and published desktops on RDS hosts.

Note: The configuration on this page is specific to the Blast protocol. In general, we do not support the USB over Session Enhancement SDK for the PCoIP protocol. Instead, we offer support for some specific devices over the PCoIP virtual channel. See Configuring Card Reader Redirection for more information.
To enable the USB over Session Enhancement SDK feature, open the Windows Registry Editor ( regedit.exe) on the remote desktop, navigate to HKEY_LOCAL_MACHINE\SOFTWARE\VMware, Inc.\VMware VDM\Agent\Configuration, and set the UsbVirtualChannelEnabled key to true.
Note: You do not need to configure this registry setting for non-desktop (Chrome/HTML Access/Android) blast clients.

When this feature is enabled, USB traffic might use the TCP connection that the display protocol uses, or it might use a dedicated TCP connection. The connection that USB traffic uses depends on your configuration.

For example, with the VMware Blast display protocol, USB traffic might use the VMware Virtual Channel (VVC) or the TCP side channel.

By default, the TCP side channel uses TCP port 9427. The VVC side channel uses the same port as the VMware Blast display protocol.

USB counters displayed using PerfMon on Windows agents are valid if USB traffic is configured to use the VVC.