Consider the following when setting up load balancing for Workspace ONE UEM components deployed on premises.

  • You can configure load balancers with an algorithm of your choosing. Workspace ONE UEM supports simple algorithms such as Round Robins and more sophisticated ones such as Least Connections.
  • The following are some examples for configuring persistence for each of the following components:
    • Device Services: Session persistence timeout of 20 minutes is required based on the default configuration of Workspace ONE UEM.

      If the Enrollment Session Timeout values are modified in Workspace ONE UEM Console Settings, then you must set the Persistence Timeout values to the same value.

    • UEM console: Session persistence timeout of one hour is required based on the default configuration of Workspace ONE UEM.

      If the Idle Session Timeout values are modified in the UEM Console Settings, then you must set the Persistence Timeout values to the same value.

    • Secure Email Gateway: Session persistence timeout value for the Secure Email Gateway must be the same as the persistence timeout value for your Exchange ActiveSync Servers based on recommendations from the Mail Solution vendor.
    • Mail (EAS) Servers: Follow the recommendations from your load balancer and mail environment vendors to configure the load balancer in front of one or more EAS servers when using one or more SEGs. In general, Workspace ONE UEM does not recommend using IP-based persistence when using one or more SEGs.
  • Workspace ONE UEM recommends load balancers to redirect all HTTP requests to HTTPS.