

Teams – Often times, VDI teams could be different from network and security teams and it maybe cumbersome to go through the various approval processes to stand up UAG server in the DMZ. If UAG is setup, users can directly access Horizon from internet using a public URL instead of logging in via a VPN. User Experience – While using VPN, user requires to do two steps to connect to Horizon apps and desktops. If the customer already has an existing VPN solution, this could additional setup. Users access applications/desktops only and users’ network is not patched to the internal network like a Client VPN.Įxtra Servers – UAG Servers need to be stood up in DMZ. Security – Main difference is the Access Control is at the application layer and not at the network layer. Merits and Demerits of VMware UAG versus VPN Merits The following are the merits of UAG and a Client VPN like Cisco An圜onnect.

Endpoint scanning capabilities to check for Windows Patch level, AV update and so on.Authenticates(additionally multi-factor) users before establishing a connection.Provide remote access to Horizon apps and desktops hosted internally.One of them quizzed me on the merits and demerits of using VMware UAG versus Client VPN to access Horizon Desktops and Apps.īefore doing a compare and contrast, the following are what both UAG and Client VPN have in common: Lots of customers use VPN to access virtual desktops and apps instead of directly landing on an application proxy from the internet.
