V-286728

Discussion

The maxConnections setting limits the maximum number of concurrent SSL Gateway connections accepted by a Horizon Connection Server. Limiting concurrent connections helps protect the server from resource exhaustion and reduces the potential impact of denial-of-service conditions by preventing the server from accepting more simultaneous connections than it is designed to handle. Satisfies: SRG-APP-000001-AS-000001, SRG-APP-000435-AS-000163

Check Content

If the "HTTP(S) Secure Tunnel" option is not enabled in the Horizon Connection Server configuration, this requirement is not applicable.

1. On the Horizon Connection Server, navigate to:

<install_directory>\sslgateway\conf

Note: <install_directory> defaults to "%PROGRAMFILES%\Omnissa\Horizon\Server" unless changed during installation.

2. Verify the file "locked.properties" exists.

If the "locked.properties" file does not exist, this is a finding.

3. Open "locked.properties" in a text editor. Review the following additional setting if present:

maxConnections

If "maxConnections" is present and is set to a value greater than "4000", this is a finding.

(Note: The "maxConnections" setting can be higher than the default of 2000 [up to a maximum of 4000] to support larger Horizon deployments.)