A customer would like to implement Horizon 7 using Unified Access Gateway for external access.
Referring to the exhibit, which two architectural considerations are required? (Choose two.)
A customer would like to implement Horizon 7 using Unified Access Gateway for external access.
Referring to the exhibit, which two architectural considerations are required? (Choose two.)
When implementing Horizon 7 using Unified Access Gateway for external access, there are two primary architectural considerations. First, SSL Offloading or Bridging is crucial to manage secure communication between clients and servers. This can be important depending on the network setup, especially in scenarios that involve complex firewall and load balancing configurations, ensuring optimal performance and security. Second, DNS Lookup in the DMZ is vital for resolving hostnames to IP addresses, which is necessary for routing connections efficiently between the UAGs and the internal resources. Without proper DNS settings, the functionality and reliability of the connections could be compromised.
A,D In this scenario where multiple UAGs and an unmatched number of Connection Servers are deployed, load balancing will be used (thus B and E are incorrect). Depending on your firewall/load balancing config, you need to set SSL offloading or bridging when deploying the UAG. DNS Lookup is also needed in the DMZ, while you can use IP address instead of FQDN, this can impact functionality and is not optimum. Session affinity is handled by the load balancer so C is incorrect.
I think the answer is C & D Session Affinity Options is always a consideration if using multiple UAGs (The secondary prototocol must connect through the same UAG as the primary authentication protocol) DNS lookup is required so that the UAG can route the connection to the VM. SSL Offloading or Bridging is only a consideration if using user certificate authentication (smart cards etc.). UAGs don't need One-to-one mapping or to be paired with connection servers.
Based off how sparse the diagram is, I'd say all of those answers are considerations!
Surely we do not PAIR UAGs. We can map then to a connect server using tags
Sorry, I might be mistaken, Tags are used to map ressources between CS and Pools...I guess we can pair statically or dynamically UAGs and CSs.