Hey, we have View Blast working via a Security Server in our setup. We did not install the HTML Access additional installers on the Security Server, from my understanding you don't need to do this as the Security Server only acts as a gateway and all the rest occurs on the paired connection server.
So you install the HTML Access on the connection server that the security server is paired with. You need to enable the firewall rules on the security server to allow Blast access. These are configured by the security server setup automatically, but are disabled by default.
So the process for us was:
1) Install HTML access on Connection server (this was already done for us as we were using it internally already)
2) Install Security Server in DMZ (our server is also not connected to the domain, and we opted to use IPsec to pair. Additionally we had to configure rules in our firewalls to allow the non-IPsec traffic through so that the security server could pair with the connection server initially during the install)
3) Enable the HTML Access (Blast) firewall rules in the windows firewall on the Security Server
4) Profit
It sounds like you've already got the security servers running okay with pcoip? So my guess is that all you need is to enable those firewall rules that are disable by default and you're good to go.
It's also worth noting that if your using firewalls between your security server and your connection server that they need to allow the blast traffic to the IP address ranges used by the view vm's.