Firewall Rules for DMZ-Based Unified Access Gateway Appliances This provides more fexibility and also simplifies the UAT deployable. UAG 3.10 does not require netowrk profiles to be created for Distributed Port Groups that are used by the UAG. Without the static route configured at UAT NIC3 (eth2), the return traffic will try to via UAG default gateway NIC1 (eth0) This will allow internet (outer) Horizon View clients access traffic flow through the following pathĪnd with the same return path. NIC3 (eth2) needs static route to the F5 Load Balancing VIP network. | (No route between managemnt and internal, via firewall only)

UAG-Appliances - NIC2 (eth1) - Management | Default Gateway (0.0.0.0 - Global Gateway) It includes 'Unified Access Gateway Three NIC Optoins' -Internet. Management traffic is using HTTPS port TCP 9443.

In production, a threenic deployment separates the Internet (Outer) with its own NIC, and separates management and backend systems onto two dedicated networks. Carl Stalhood has quite details deloyment Document

Euc unified access gateway