Symptoms
Unified Access Gateway (UAG) is designed to forward incoming HTTP requests to the appropriate edge service using a proxy pattern. However, regardless of any ProxyPattern settings with /portal, UAG will always forward incoming HTTP requests to /portal. Unified Access Gateway uses proxy pattern to forward incoming HTTP requests to the right edge service such as Horizon or one of the configured web reverse proxy instances such as VMware Identity Manager.However, https://<UAG-IP>/portal URL is always forwarded to portal page of configured instance such as a Connection Server or Daas, overriding any ProxyPattern settings on UAG.
For example:
Configure UAG manually, [General Settings] – [Edge Service Settings] – [Horizon Setting] Enable [Horizon], open Advanced settings
[Proxy Pattern] setting
/|/(.*\.action|admin|images/|css/|.js/|ajax/appblast|appblast/|portal|view-client/|appimage/|horizonadmin|xmp|dt-rest|haca).*
Even if you removed the "/portal" from the Proxy Pattern above on the Advanced edge service settings, you can still access the Connection Server portal page with the URL https://<UAG-IP>/portal.
Purpose
The purpose of this article is to outline the expected product behaviour.
Cause
/portal is a standard URL pattern automatically added when the UAG Horizon Edge Service is enabled.
Resolution
By design, access to URL /portal is always forwarded.
Related Information
For more information, see VMware Docs - Advanced Edge Service Settings.
