Refresh your browser to validate that Reverse Proxy is configured and shows green status.Proxy Pattern: (/|/SAAS/auth/logout(.)|/SAAS/auth/login(.)|/catalog-portal(.)|/SAAS/horizon(.)|/SAAS/auth/authenticatedUserDispatcher|/web(.)|/SAAS/apps/|/hc(.)|/SAAS/jersey/manager/api/branding|/SAAS/jersey/manager/api/images/(.*)) In order to achieve our objective, we are using different Proxy Pattern which is defined below, then click on Save Enter all the data as per this VMware docs article.Click on Enable Reverse Proxy Settings toggle button to open settings.Click on gear icon corresponding to Reverse Proxy Settings.Login to UAG and click on Show for Edge Service Settings.

Note: This Proxy Pattern is tested for accessing Horizon Virtual Apps from WS One Access Portal and is subject to change depending on more SAAS based apps. internal users will hit on WSO Access FQDN which will redirect to WSO Access IP (Load Balanced IP in case of HA deployment) and for users, coming in from Internet, they will hit on WSO Access FQDN which will redirect on UAG-RP IP. This article talks about the generic configuration where in Proxy patterns doesn’t block admin URL from internet which i have defined in this blog.īelow is conceptual design where in we are considering Split DNS. In case, customer doesn’t have Reverse Proxy solution they can leverage on VMware Unified Access gateway as RP for WS One Access. As of now there is no native feature to block this from WS One Access console and requires the implementation of Reverse proxy for such solution. I have been working with multiple customers and there has been a concern to block admin access to local admin user as well as domain users for administration console from Internet.

Uag workspace one