Reviewer's Guide for View in Horizon 7: Overview

VMware Horizon 7 version 7.2

Introduction

The Reviewer’s Guide for View in VMware Horizon 7: Overview provides a technical overview of the View component of VMware Horizon® 7 version 7.2. The View component (formerly called Horizon View) offers a virtual desktop infrastructure (VDI) and published applications through Remote Desktop Session Host (RDSH). This is done through a single platform, which simplifies desktop administration and operations, and enhances user experience. In comparison to physical desktops, delivering View virtual desktops from centralized VMware vSphere® servers enhances the security of applications and data and improves IT responsiveness, while at the same time reducing costs. The user enjoys a consistent and responsive experience across devices and locations, while maintaining IT-approved levels of customization.

Purpose

This white paper is one of a series of guides to help you evaluate the View component of Horizon 7. This white paper provides an overview of View in Horizon 7 key features. For white papers containing exercises to guide you through the basic installation and initial configuration processes, as well as to explore key features and benefits, see All Guides.

Note: This series of guides is designed for evaluation purposes only. It uses the minimum required resources for a basic deployment and does not explore all features. Do not use this evaluation environment as a template for a production environment. For information beyond the considerations of this white paper, see VMware Horizon 7 Documentation.

Audience

This guide is intended for IT administrators, architects, engineers, and product evaluators who want to install View in Horizon 7 and deploy a VDI environment. Both current and new users of View can benefit from using this guide. You should be familiar with VMware vSphere and VMware vCenter Server®. Familiarity with other technologies is also helpful, including networking and storage in a virtual environment, Active Directory, identity management, directory services, Simple Mail Transfer Protocol (SMTP), and RSA SecurID.

Before You Begin

This guide is first in the series of guides. We recommend that you follow the guides in order. For information about all guides in the series, see All Guides.

About VMware Horizon 7 and the View Component

View is a major component of Horizon 7, which offers a virtual desktop infrastructure.

About VMware Horizon 7

VMware Horizon 7 is a centralized desktop virtualization solution that enables organizations to deliver virtualized or remote desktop services and applications to end users from centralized VMware vSphere servers. The VMware Horizon 7 solution includes a number of components, of which View is the main one.

About the View Component of Horizon 7

With View, IT departments can run virtual machine (VM) desktops and applications in the data center and remotely deliver virtual desktops and applications to employees as a managed service. One advantage of View is that remote desktops and applications follow the end user regardless of device or location. Users can access their personalized virtual desktops or remote applications from company laptops, their home PCs, thin client devices, Macs, tablets, or smartphones. The benefits to administrators include centralized control, efficiency, and security with desktop data stored in the data center.

View brings advantages to both end users and IT administrators. End users are no longer restricted to one specific machine, and can access their system and files across supported devices and locations. As an IT administrator, you can use View to simplify and automate the management of desktops and applications, and you can securely deliver desktops as a service to users from a central location. You can quickly create virtual desktops on demand based on location and profile.

A single administration console provides detailed levels of control, allowing you to customize the end-user experience, access, and personalization to support corporate policy. End users get a familiar, personalized environment that they can access from any number of devices anywhere throughout the enterprise or from remote locations. And as an administrator, you have centralized control, efficiency, and security by storing desktop data in the data center.

JMP – Next-Generation Desktop and Application Delivery Platform

JMP (pronounced jump), which stands for Just-in-Time Management Platform, represents capabilities in VMware Horizon 7 Enterprise Edition that deliver Just-in-Time Desktops and Apps in a flexible, fast, and personalized manner. JMP is composed of the following VMware technologies:

JMP allows components of a desktop or RDSH server to be decoupled and managed independently in a centralized manner, yet reconstituted on demand to deliver a personalized user workspace when needed. JMP is supported with both on-premises and cloud-based Horizon 7 deployments, providing a unified and consistent management platform regardless of your deployment topology. The JMP approach provides several key benefits, including simplified desktop and RDSH image management, faster delivery and maintenance of applications, and elimination of the need to manage “full persistent” desktops.

Packaging and Licensing

Horizon 7 is available in three editions—Standard, Advanced, and Enterprise—plus a Linux option. View is at the foundation of all three Horizon 7 editions, as well as VMware Horizon for Linux. Each edition builds successively on the ones before, extending the capabilities with additional components and products. You can use the VMware Horizon 7 Edition Selector tool to help determine which edition is best for your enterprise.

For more information, see VMware Workspace ONE and VMware Horizon Packaging and Licensing and Comparison Table for Horizon 7 Editions.

View Features

The new and existing features of View include:

Skype for Business Solution (New)

The optimized Skype for Business solution is available for environments with Windows-based Horizon Clients at this time, enabling you to make audio and video calls from a virtual desktop. Skype for Business is a unified communications platform that provides multiple forms of communication, such as instant messaging, VoIP (voice over IP), file transfer, web conferencing, voice mail, and email. You can provide an optimized Skype for Business solution to virtual desktops in your production environment to improve the user experience, secure collaboration, simplify management, and reduce costs.

  • Virtualization pack components include a media proxy on the agent (virtual desktop) side, and a media engine on the client side.
  • All media is sent as a separate RTP stream directly between endpoints, outside of the display protocol so that the server infrastructure is not affected during audio and video calls.
  • Through the use of native Skype codecs, bandwidth usage is equivalent to native Skype for Business calls.

For more information, see VMware Horizon 7.1 Is GA! What’s New – Part 2 and VMware Horizon 7.2 GA:

What’s New with Skype for Business, a New Help Desk Tool & More.

Help Desk Tool (New)

The new Help Desk Tool enables you to troubleshoot and remediate issues without specialists. You can use this tool to search for users, find their sessions, initiate Microsoft Remote Assistance, and send user messages. If the issue requires it, you can use this tool to disconnect from a session, log out, and reset desktops to resolve the issue.

For more information, see VMware Horizon 7.2 GA: What’s New with Skype for Business, a New Help Desk Tool & More.

Instant Clone Technology Enhancements

Instant Clone Technology, a key component of JMP (Just-in-Time Management Platform), provides the ability to rapidly create and provision virtual desktops based on a snapshot of a master image. You can use Instant Clone Technology to rapidly create nonpersistent desktops that can maintain user customization, user-installed applications, and more, from session to session. The desktop itself exists only until the user logs out and then it is destroyed, and new desktops are recreated from the latest master image. This eliminates many routine maintenance tasks, such as patching, which in turn simplifies management. Instant clones are ideal for deploying pools of floating desktops.

You can also use Instant Clone Technology in combination with VMware User Environment Manager and VMware App Volumes to rapidly create desktops that appear to be persistent. You can create pools where desktops are provisioned proactively, or create and provision desktops on demand for users to log in to.

For more information, see VMware Horizon 7 Instant-Clone Desktops.

You can now use Instant Clone Technology to reuse pre-existing Active Directory accounts for instant-clone pools. You can also configure super video graphics array (SVGA) video memory settings in the master virtual machine, and the pools inherit your settings. Instant Clone Technology has also been extended to support local datastores.

In the Horizon Administrator console, you can use the new Instant Clones option in the Add Farm wizard to quickly create new RDSH farms or refresh existing ones. You can create and customize instant clones quickly, and edit the farm settings to scale up or down. You can minimize maintenance windows by setting up a one-time update or refresh, or scheduling a recurring refresh to maintain optimal performance and storage.

Horizon 7 also now supports NVIDIA GRID vGPU, which enables you to use instant-clone desktop VMs for high-end, hardware-accelerated workstation graphics. Horizon 7 also now includes multi-VLAN support, which enables you to create large desktop pools or RDSH farms in environments where the physical network is divided into subnets that would not normally support large numbers of VMs.

For more information, see the VMware Horizon 7.1 Is GA! What’s New – Part 1,

VMware Horizon 7.2 GA: What’s New with Skype for Business, a New Help Desk Tool & More, and Just-in-Time Apps with VMware Horizon 7 blog posts.

Cloud Pod Architecture Enhancements

Cloud Pod Architecture (CPA) works with View to provide cross-data-center administration, flexible user-to-desktop mapping, high-availability desktops, and disaster recovery capabilities. Improvements to CPA scalability include the following:

  • Support for up to 120,000 connected sessions across a maximum of 12 Horizon 7 instances (also called View pods) and five sites. A View pod is a View implementation consisting of multiple Connection Server instances, with a shared database server, storage, and vSphere and network infrastructures. The View pod is a brokering and management environment where pods are connected to both user entitlements and sessions in other pods. This connection ensures that users are directed to their home site, or an alternative backup site, depending on desktop or session availability.
  • Support for 4,000 desktops with a single VMware vCenter Server instance for linked-clone, full-clone, and instant-clone deployments.

For more information, see VMware Horizon 7.2 GA: What’s New with Skype for Business, a New Help Desk Tool & More.

Scalability Enhancements

View scalability is built upon VMware vSphere to manage both desktops and servers, and is now increased for CPA deployments. The View scalability enables you to:

  • Benefit from tight integration with the latest features of vSphere to reduce costs by increasing the number of virtual machines per host
  • Use a View Storage Accelerator to support end-user logins at larger scales with the same storage resources
  • Configure Connection Servers to broker connections between end users and the remote desktops and applications that they are authorized to access
  • Use instant clones or linked clones to quickly create virtual desktops that share virtual disks with a master image, which conserves disk space and simplifies the management of patches and updates to the operating system

For more information, see VMware Horizon 7.2 GA: What’s New with Skype for Business, a New Help Desk Tool & More.

Linux Virtual Desktop Capabilities Enhancements

VMware Horizon 7.2 for Linux now includes key features such as USB redirection, client drive redirection (CDR), and HTML access with audio capabilities, as well as expanded support for Red Hat Enterprise Linux (RHEL) and CentOS 64-bit operating systems. View continues to support Linux-based virtual desktops, including RHEL, Ubuntu, CentOS, SUSE, and NeoKylin, as well as additional capabilities such as copying and pasting text between Linux virtual desktops and the client machine. Horizon for Linux licenses are available on a per-named-user and per-concurrent-connection basis.

Linux virtual desktops are open source, and provide the following benefits:

  • Licensing – Linux desktops do not have a licensing fee, and are often used to lower costs.
  • Customization – The Linux operating system source code is in the public domain and can be modified by anybody. For businesses with highly technical programmers, applications are not limited by operating system constraints.
  • Adaptability – By supporting Linux-based virtual desktops, View enables the use of Linux-based applications without requiring businesses to reinvest in a fully Windows-based infrastructure.
  • Community – As with Windows, Linux applications are used in a wide range of industries, including education, government, media and entertainment, and technical research.

For more information, see VMware Horizon 7.1 Is GA! What’s New – Part 2 and VMware Horizon 7.2 GA:

What’s New with Skype for Business, a New Help Desk Tool & More.

Horizon 7 Published Applications Enhancements

Horizon 7 now extends just-in-time delivery from virtual desktops to published applications by leveraging JMP. The operating system (OS), applications, and user personalization are assembled on demand, so desktops, applications, settings, and preferences all follow the end users, regardless of where they are connecting from or what type of device they are using.

You can now customize the app icons that end users see in the selector window, enabling them to identify RDSH applications more easily. For a demonstration, see Customizing Horizon RDSH Application Icons.

You can now allow unauthenticated user access to published apps from both Windows and Linux clients. Allowing unauthenticated access can be useful for kiosk mode, or where an application has its own security and user management. For a demonstration, see Providing Unauthenticated Access to Horizon Published Applications.

For more information, see VMware Horizon 7.1 Is GA! What’s New – Part 2.

Horizon Client-Specific Feature Enhancements

A major advantage of Horizon 7 is that remote desktops and applications follow the end users, regardless of which endpoint devices they use. Users can access their virtual desktops and remote applications from company laptops, home PCs, Macs, thin clients, tablets, or smartphones. Horizon Client is installed on each endpoint device.

New Horizon Client and Horizon Agent binaries that enhance the user’s remote experience are released periodically through the year. Some of the latest Horizon Client enhancements include the following:

  • Ability to download and install the Windows client faster and easier
  • Ability for Chromebook users to use multiple screens
  • Ability to use Samsung Galaxy S8 as a thin client
  • Ability to enable Aero Peek, also called Desktop Preview, which provides a view of a Windows desktop when you hover the cursor over the Show Desktop button on the taskbar, or press the Windows Key + Spacebar
  • Support on Horizon Clients for Mac for touch bar, touch ID, and automatic updates
  • Support on Horizon Clients for iOS for preservation of user touch settings, and enabling widgets
  • Support on Horizon Clients for Android for multiple monitors with touchpad mode, as well as sidebar and floating icon enhancements
  • HTML support for multiple monitors, as well as new look and feel pages

For more information, see VMware Horizon 7.1 Is GA! What’s New – Part 1.

Blast Extreme Enhancements

Blast Extreme is a remote display protocol option, in addition to PCoIP and Microsoft RDP. Blast Extreme enables your users to connect to virtual desktops or RDSH applications through HTML Access or through VMware Horizon Client. Blast Extreme is based on the H.264 codec that supports the broadest range of client devices and can be set as the default for pools, farms, and entitlements.

Blast Extreme has now been extended with an adaptive UDP-based transport. Users can rate the network they are using as Typical, Excellent, or Poor, from their client devices. Blast Extreme then selects the strategy to deliver the best user experience, based on the user rating.

  • Typical – This option is the default, and in most cases does not need to be changed. Blast Extreme uses TCP for the initial connection to authenticate, and then uses the new adaptive UDP-based transport for the connection to the desktop or published application session.
  • Excellent – This option can be well suited to LAN environments, or useful in low-bandwidth WAN links. Blast Extreme uses TCP for both the initial authentication and the connection to the desktop or application.
  • Poor – This option adapts to a poor network connection, such as a connection with more than 20 percent packet loss. The new adaptive UDP-based transport takes actions, such as duplicating some packets, to improve user experience.

For more information, see VMware Horizon 7.1 Is GA! What’s New – Part 2.

You can configure the Blast Extreme protocol as the default for desktop and application pools. When configured with Cloud Pod Architecture (CPA), you can make Blast Extreme available for global entitlements as well. Blast Extreme provides the following benefits:

  • Supports Windows, Linux, Mac, Android, iOS, Chrome, and web (HTML Access) clients
  • Meets performance requirements for visually intensive applications when used with NVIDIA GRID GPU–based hardware acceleration in the host
  • Supports use of both TCP and UDP network transport, compared to PCoIP which uses only UDP
  • Provides feature and performance parity with the PCoIP display protocol
  • Lowers CPU consumption for longer battery life on mobile devices when the H.264 option is enabled, which allows video decoding
  • Provides ease of management with Windows Group Policy or Horizon 7 Smart Policies included with VMware User Environment Manager

For more information, see Blast Extreme Display Protocol in Horizon 7.

Security Enhancements

Security enhancements now provide an option to hide information from Horizon Client interfaces.

You can prevent the server connection URL and list of Active Directory domains from being displayed.

View security features also enable you to:

  • Use two-factor authentication, such as RSA SecurID or RADIUS, or smart cards to log in
  • Use Active Directory accounts when provisioning remote desktops and applications in environments that have read-only access policies for Active Directory
  • Use SSL tunneling to ensure that all connections are encrypted
  • Use VMware vSphere High Availability to ensure automatic failover in the event of a system failure

If you use vSphere 6.5 with Horizon 7, you can use vSphere to encrypt full-clone virtual machines. Encryption happens at the hypervisor instead of the virtual machine, making the encryption agnostic. This enables the encryption to be managed by policy applied to multiple virtual machines, independent of their guest OS.

For more information, see What’s new in vSphere 6.5: Security and Hiding the Connection Server URL and Domain list from the Horizon Client.

Additional Platform Enhancements

Some additional enhancements to platform features include:

  • Microsoft Windows 2016 – Horizon 7 now supports Windows 2016 for Connection Server and Composer, two View components.
  • VMware vRealize® Operations Manager™ – Horizon 7 now includes a plug-in for the VMware vRealize Orchestrator™, and support for pool replication and automated application approval workflows. Login data is gathered for monitoring in vRealize Operations Manager.

True SSO Feature

True Single Sign-On (True SSO) separates the process of authentication from that of access to desktops and applications. True SSO enables you to authenticate to VMware Identity Manager™ or VMware Workspace™ ONE™ with an alternative to Active Directory (AD), and still access Horizon 7 desktops and applications without having to authenticate to AD.

In the past, AD credentials were required for single sign-on. Now you can choose from among authentication methods, including two-factor authentication such as RSA SecurID and RADIUS, as well as AD.

True SSO requires VMware Identity Manager, an enrollment server in the Horizon 7 environment that interoperates with View, and a Microsoft Certificate Authority. True SSO uses a certificate-based Windows login, freeing users from having to enter their AD credentials. A short-lived, one-time certificate is generated for the duration of each user’s session, which is presented to Windows and automatically logs them in. Users can also log in to VMware Identity Manager using non-AD methods, including biometrics, RSA SecurID, and RADIUS.

True SSO simplifies the login process to Windows desktops and published applications, especially when authenticating against third-party systems using non-AD methods. This results in a seamless process when accessing multiple desktops and published applications, which can make a significant difference to end users. You can enable True SSO on a global level or on a pool level in Horizon 7.

For more information, see Introducing True SSO (Single Sign-On) in VMware Horizon 7.

Smart Policies

Smart Policies provide you with detailed control of desktop and RDS-based application functionality based on defined rules. Smart Policies use VMware User Environment Manager to provide the ability to dynamically enable, disable, or control key features, such as cut-and-paste, local printing, client drive redirection, and PCoIP profile selection. You can base the Smart Policies on user identity, as well as on multiple variables such as client device, IP address, pool name, and more.

For example, you can set a different PCoIP protocol profile based on whether the user accesses their desktop from a WAN or a LAN. This provides you with detailed control, and provides your end users with an enhanced experience, based on their location. In another example, you can increase security by disabling features such as clipboard redirection for end users who are on noncorporate devices or who are external to the network.

You can use Smart Policies to control the following features based on a variety of conditions, such as:

FEATURES CONDITIONS
• Enable or disable USB redirection • View client information – IP and name
• Enable or disable printing • Endpoint location – Internal or external
• Set detailed clipboard-sharing settings • Tags
• Set detailed client drive redirection settings • Desktop pool name
• Define PCoIP bandwidth profiles  

Table 1: Smart Policies Features and Conditions

You can configure policy settings in the administration UI to control access for remote experience features, such as multimedia redirection (MMR), USB access, and PCoIP profile settings. These policy settings can be inherited or overridden in individual desktop pools or at the user level.

You can define Smart Policies based on a variety of conditions, including client machine OS, user identity (Active Directory user, group, or organizational unit), location, desktop from which the resources are provisioned, and display protocol.

For more information, see VMware Horizon 7 Documentation.

Ease of Management

View provides centralized virtual desktop management, which enables you to:

  • Use Microsoft Active Directory to manage access to remote desktops and applications, and to manage policies
  • Use the Horizon Administrator console to manage remote desktops and applications
  • Use Horizon Administrator to distribute and manage applications packaged with VMware ThinApp®
  • Use master images to quickly create and provision pools of desktops
  • Send updates and patches to virtual desktops without affecting user settings, data, or preferences
  • Specify which types of USB devices end users can connect to
  • Split a composite device that provides multiple functions, such as both video input and storage, and allow one function but not the other (such as allowing video input, but not storage)
  • Integrate with VMware Identity Manager so that end users can access remote desktops through the VMware Identity Manager user portal on the Internet

Familiar Desktop Experience

View continues to provide a familiar desktop experience for end users, including the ability to:

  • Print from a virtual desktop to any local or network printer that is defined on the client device, which solves compatibility issues without requiring additional print drivers on the virtual machine
  • Use location-based printing on most client devices to map to printers that are physically near the client system (which do require print drivers in the virtual machine)
  • Use multiple monitors, and adjust the display resolution and rotation separately for each monitor, with the PCoIP or Blast Extreme remoting protocol
  • Access USB devices and other peripherals connected to the local device that displays your virtual desktop
  • Work with rich 3D graphics

Architecture and Components

View contains key components and integrated products that work together.

View in Horizon 7 Logical Architecture Overview

Figure 1: View in Horizon 7 Logical Architecture Overview

Figure 1 shows how View components—such as Connection Server, Composer, vCenter Server, and vSphere—work together to provide access to ThinApp packages, virtual desktop pools, RDSH desktop pools, and more.

VMware vSphere Foundation for View

The View component is based on a platform of VMware vSphere, a suite of virtualization products that provides a scalable platform for running virtual desktops and applications. The VMware vSphere Web Client is a browser-based application that you can use to configure the host and to operate its virtual machines.

For more information, see VMware vSphere Documentation.

VMware vCenter Server

VMware vCenter Server, included in the vSphere suite, is the central management console for your vSphere infrastructure, virtual machines, and VMware ESXi™ servers. A vCenter Server can be quickly set up and deployed, using host profiles or Linux-based virtual appliances. The vCenter Server console provides centralized control and visibility into servers that host virtual desktops, ESXi servers, virtual machines, storage, networking, and other critical elements of your virtual infrastructure. You can use vCenter Server to allocate resources for improved performance.

For more information, see VMware vSphere Documentation.

VMware ESXi

VMware ESXi is a bare-metal hypervisor that can be installed directly onto your physical server, and partitioned into multiple virtual machines. Because ESXi runs on bare metal without an operating system, the footprint is reduced, giving a very small surface for possible malware and over-the-network attacks. This also simplifies deployment and configuration by reducing the number of configuration options.

For more information, see VMware ESXi Installation and Configuration.

View Components

The View component of Horizon 7 contains a number of sub-components.

VMware Horizon Connection Server

The VMware Horizon Connection Server brokers client connections by authenticating users and directing incoming user desktop and application requests. Users connect to a Connection Server to access their virtual desktops and native, virtual, or RDSH-based applications. The Connection Server provides the following management capabilities:

  • Authenticating users
  • Entitling users to specific desktops, applications, and pools
  • Assigning applications packaged with ThinApp to specific desktops and pools
  • Managing local and remote desktop and application sessions
  • Establishing secure connections between users and desktops or applications
  • Enabling single sign-on
  • Setting and applying policies
  • Managing an instant-clone engine

For more information, see View Architecture Planning and View Installation.

VMware Horizon Composer (Optional)

The optional VMware Horizon Composer is not required for instant clones. It enables you to manage pools of desktops that share a common virtual disk, called the master image. You can create copies of the master image, called linked clones, that share the virtual disks of the master image, but which operate as individual virtual machines. You can use the vSphere Web Client to make changes to a master image, which triggers Composer to apply the updates to all linked-clone desktops or automated RDSH farms, without affecting user settings or personal data. By using Composer and linked clones to patch the master image, all linked-clone desktops are patched, which optimizes your use of storage space and facilitates updates.

Horizon Administrator Console

Horizon Administrator is a web-based administrative console for managing users and View resources such as desktops and applications. Horizon Administrator is automatically installed when you install a Connection Server. With the use of Horizon Administrator, you can centrally manage thousands of virtual desktops from a single location.

VMware Horizon 7 Administrator Console

Figure 2: VMware Horizon 7 Administrator Console

Horizon Agent

Horizon Agent communicates between Horizon Client and virtual desktops or RDSH servers. You must install Horizon Agent on all virtual machines managed by vCenter Server so that Connection Server can communicate with the virtual machines. Horizon Agent also provides features such as connection monitoring, client drive redirection, virtual printing, and access to locally connected USB devices. This process can be simplified by installing Horizon Agent on the master image used to deploy virtual machines to a group of users.

VMware Horizon Client

VMware Horizon Client for Windows, Mac, iOS, Linux, or Android is installed on every endpoint. This enables your end users to access their virtual desktops and remote applications from a variety of devices such as smartphones, zero clients, thin clients, PCs, laptops, and tablets.

Horizon Client enables users to do the following:

  • Connect to a Connection Server, a VMware Unified Access Gateway™ appliance, or a security server
  • Log in to their remote desktops in the data center
  • Edit the list of servers that they connect to

You can choose between multiple download processes. One option is to allow your end users to download Horizon Client directly from Download VMware Horizon Clients. Another option is to determine which Horizon Client each end user can download, and store the Horizon Client installers on a local storage device using the View user portal (the default landing page for Connection Server). By default, links on the View user portal connect users to Download VMware Horizon Clients.

For more information, see VMware Horizon Clients Documentation.

Horizon 7 Components That Enhance View

Horizon 7 contains many products and components that can interoperate with the View component to extend and enhance your implementation. Access to and availability of these components varies, based on the edition of Horizon 7 installed. For more information about the different editions, see VMware Workspace ONE and VMware Horizon Packaging and Licensing.

VMware Unified Access Gateway

VMware Unified Access Gateway (formerly called VMware Access Point) provides a secure gateway that allows users to access their desktops and applications from outside a corporate firewall. You can design a View deployment that uses Unified Access Gateway for secure external access to internal View desktops and applications. Unified Access Gateway appliances typically reside in a demilitarized zone (DMZ) and act as a proxy host for connections inside your trusted corporate network. This structure shields View virtual desktops, servers, applications, and Connection Servers from the public Internet, adding an extra layer of security. You can use Unified Access Gateway as an alternative to a View security server. In addition to security, Unified Access Gateway features include:

  • Authentication in the DMZ
  • Smart-card support
  • Native RSA SecurID and RADIUS authentication
  • Blast Extreme traffic directed to port 443 by default
  • Security Assertion Markup Language (SAML) assertions

For more information, see VMware Horizon 7 Product Evaluation Center.

VMware ThinApp

VMware ThinApp is an agentless application virtualization solution that creates virtualized applications and makes them available as ThinApp packages that do not require any installation on virtual desktops. ThinApp simplifies the repetitive administrative task of application installation, and reduces the storage needs of virtual desktops by maintaining applications independently of the underlying operating system. ThinApp packages are executed in a sandbox, which keeps the virtualized applications secure and isolated from the host system and other running applications.

In a View implementation, ThinApp packages reside in a repository on a network share. As an administrator, you can copy a ThinApp package from the repository directly to a virtual desktop, or place a shortcut on the virtual desktop that points to the ThinApp package in the repository.

For more information, see VMware ThinApp Documentation.

VMware App Volumes

VMware App Volumes is a real-time Windows application-delivery and application life-cycle-management solution. App Volumes uses application containers called AppStacks, which are virtual disks that contain all of the components that are required to run an application, such as executables and registry keys. When an AppStack is deployed, it is available for use within seconds without end-user installation. You can use App Volumes to deliver native Windows applications, virtualized Windows applications such as ThinApp packages, and RDSH-hosted applications. You can also use App Volumes with non-VMware solutions such as Citrix XenApp and Citrix XenDesktop.

For more information, see VMware App Volumes Documentation.

VMware User Environment Manager

VMware User Environment Manager is a scalable solution for profile and policy management for virtual, physical, and cloud-based Windows desktop environments. You can use User Environment Manager to simplify your policy management by replacing and unifying problematic, unmaintainable, or complex login scripts and profile logic. You can map environmental settings, such as networks and printers, and dynamically apply end-user security policies and customizations. User Environment Manager ensures that each end user’s settings and customizations follow them from one location to the next, regardless of the endpoint used to access their resources.

For more information, see VMware User Environment Manager Technical Overview.

VMware Identity Manager

VMware Identity Manager is a solution that provides application provisioning, a self-service catalog of applications and virtual desktops, conditional access controls, and single sign-on (SSO) for software as a service (SaaS), web, and cloud resources. VMware Identity Manager gives your IT team a central place to manage user provisioning and access policy with directory integration, identity federation, and user analytics.

For more information, see VMware Identity Manager Documentation.

VMware vRealize Operations for Horizon

VMware vRealize Operations for Horizon is a monitoring and reporting tool that collects performance data from your View environment, and displays the data on customizable dashboard pages and in alerts. You can use the predictive analysis and real-time data that vRealize Operations for Horizon displays to monitor the health, performance, behavior, and important metrics of your environment. You can gain insight into user sessions, perform troubleshooting tasks, and resolve user problems.

You can monitor your View environment from the VMware vRealize Operations for Horizon console and track the health of your enterprise, including the hypervisor layer, network, sessions, users, and applications. Smart alerts with dynamic thresholds enable you to isolate system weaknesses and proactively optimize performance, helping you deliver a better user experience.

For more information, see vRealize Operations for Horizon and vRealize Operations for Horizon Documentation.

Summary

This white paper is one of a series of guides that explore the View component of VMware Horizon 7. This guide starts the series by introducing the View component of VMware Horizon 7, describing benefits, features, and basic architecture, and describing how View and other Horizon 7 components interoperate. For information and exercises to explore the setup and use of those capabilities—such as instant clones, Smart Policies, and more—see All Guides. For information beyond the considerations of this white paper, see VMware Horizon 7 Documentation.

All Guides

You can explore many key features and capabilities in the Reviewer’s Guide series for View in

VMware Horizon 7:

Additional Resources

You can find out more about the View component of Horizon 7 from the following resources:

About the Authors

This white paper was written by Cindy Heyer Carroll, Technical Writer, End-User-Computing Technical Marketing, VMware, with appreciation and acknowledgement for assistance from Donal Geary, Reference Architect Engineer, End-User-Computing Technical Marketing, VMware.

Feedback

The purpose of this white paper is to assist you. Your feedback is valuable. To comment on this paper, contact VMware End-User-Computing Technical Marketing at euc_tech_content_feedback@vmware.com.