Hi Hamish,
Let me double check your findings. Are you saying that:
- You're using 5.3 backend, right?
- You're using HTML5 client from APM Webtop, right? Have you tried native client from APM Webtop?
- SNAT pool does not work for you while AutoMap works, right?
- Client cert is required on the serverssl profile. What kind of client cert? Is View Connection Server configured to check client certs?
P.S. the fact that VDI closes the tcp/4172 connection after 60s is according to the PCoIP protocol specification. We close the connection if we have not received any data from the backend within that time slot. Let me ask you - have you configured serverssl profile to use SNI "pcoip-default-sni"?