# RAS Secure Gateway

<table><thead><tr><th width="136">Source</th><th width="132">Destination</th><th width="110">Protocol</th><th width="95">Port</th><th>Description</th></tr></thead><tbody><tr><td>RAS Secure Gateway in Forwarding mode</td><td>RAS Secure Gateway in Normal mode</td><td><p>TCP, UDP</p><p>TCP, UDP</p></td><td><p>80, 443</p><p>3389</p></td><td><p>Management and user session connections.</p><p>Optional - Used for user session if RDP Load Balancing is enabled.</p></td></tr><tr><td></td><td>RAS Performance Monitor</td><td>TCP</td><td>8086</td><td>Agent (Telegraf service) sends collected performance data to InfluxDB.</td></tr><tr><td>RAS Secure Gateway in Normal mode</td><td>Remote Desktop Services</td><td>TCP, UDP</td><td>3389</td><td>RDP Connections.</td></tr><tr><td></td><td>RAS Connection Broker</td><td><p>TCP</p><p>TCP, UDP</p></td><td><p>20002</p><p>20009</p></td><td><p>RAS Connection Broker service port - communications with RAS Secure Gateways and the RAS Console (in Normal mode only).</p><p>Device Manager shadowing via Firewall (indirect network connection) if RAS Console runs on RAS Connection Broker</p></td></tr><tr><td></td><td>RAS Performance Monitor</td><td>TCP</td><td>8086</td><td>Agent (Telegraf service) sends collected performance data to InfluxDB.</td></tr><tr><td></td><td>Localhost</td><td>TCP</td><td>20020</td><td>Communication with User Portal web server (NodeJS).</td></tr></tbody></table>