A shared multilevel port has to be added to the global zone for Sun Ray services in order to have access from a labeled zone.
Become root from ADMIN_LOW (global zone).
Start the Solaris Management Console (SMC).
# smc &
Go to Management Tools.
Select hostname:Scope=Files, Policy=TSOL.
Select .
From the menu bar, choose Action->Properties.
Click Add under Multilevel Ports for Shared IP Addresses.
Add 7007 as Port Number, select TCP as Protocol, and click OK.
Repeat the previous step for ports 59999, 7010, and 7015.
Restart network services by running the following command:
# svcadm restart svc:/network/tnctl
Verify that these ports are listed as shared ports by running the following command:
# /usr/sbin/tninfo -m global
Reboot the Sun Ray server.
# /usr/sbin/reboot