VMware Horizon 8 TCP and UDP Ports

VMware Horizon 8 uses TCP and UDP ports for network access between its components.

To determine which ports are needed for Horizon 8 products and solutions, see VMware Ports and Protocols.

During installation, VMware Horizon 8 can optionally configure Windows firewall rules to open the ports that are used by default. If you change the default ports after installation, you must manually reconfigure Windows firewall rules to allow access on the updated ports. See "Replacing Default Ports for VMware Horizon 8 Services" in the Horizon 8 Installation and Upgrade document.

For a list of ports that VMware Horizon 8 uses for a certificate login associated with the TrueSSO solution, see VMware Horizon 8 TrueSSO Ports.

For a list of ports for the edge services gateway, see Port and Protocol Requirements for Deploying Horizon 8 Edge in the Using VMware Horizon Cloud Service - nex-gen documentation.

Note: The UDP port number that clients use for PCoIP might change. If port 50002 is in use, the client will pick 50003. If port 50003 is in use, the client will pick port 50004, and so on. You must configure firewalls with ANY where an asterisk (*) is listed in the table.

Note: Microsoft Windows Server requires a dynamic range of ports to be open between all connection brokers in the VMware Horizon 8 environment. These ports are required by Microsoft Windows for the normal operation of Remote Procedure Call (RPC) and Active Directory replication. For more information about the dynamic range of ports, see the Microsoft Windows Server documentation.

Note: On a connection broker instance, port 389 is accessible for infrequent, ad hoc connections. It is accessed when installing an unmanaged agent as shown in the table, and also when using an LDAP editor to directly edit the database, and when issuing commands using a tool such as repadmin. A firewall rule is created for these purposes when AD LDS is installed, but it can be deactivated if access to the port is not required.

Note: VMware Blast Extreme Adaptive Transport reserves some ports in the ephemeral port range 49152-65535, by default.