Authentication and authorisation is performed over an HTTPS (TCP 443) connection to View Security Server.

One of the roles of the View Security Server is to ensure that only traffic on behalf of authenticated users is allowed to reach the internal network and only to those desktops that the user is authorized to access. It’s also an interesting read, regardless: They were incredible helpful and went out of their way with conference calls, performing research on our behalf, and even writing up the following explanation on why the aforementioned results are actually false positives. To try to either get this fixed, we reached out to our local VMware reps for assistance. We opened a ticket with VMware who explained that this was due to port 4172 not using the SSL certificate that is used for HTTPS, and subsequently opened a ticket with Teradici. We found this odd since we had an SSL certificate installed on the Security Server, and going to the site externally showed it using a proper cert. SSL Certificate - Signature Verification Failed Vulnerability.SSL Certificate - Subject Common Name Does Not Match Server FQDN.SSL Server Supports Weak Encryption Vulnerability (port 4172/tcp over SSL).

As part of our periodical PCI Compliance scans, our corporate vulnerability scanner recently picked up the View 4.6 PCoIP Gateway as having a few issues.

Certificate error with teradici pcoip