# Single Farm with Public & Private RAS Secure Gateways To handle more connections on Secure Gateways, using a designated RAS Secure Gateway is recommended for intranet users (private) with direct client connection mode. To apply stricter security settings to servers with Internet access, using a designated Secure Gateway is recommended for Internet users (public) with Gateway SSL client connection mode. The appropriate RAS connection settings can be applied either centrally via Client Policy in the Parallels RAS Console or manually in the Parallels Client.
Single Farm with Public & Private RAS Secure Gateways
## **Installation Notes** Public RAS Secure Gateway and primary RAS Connection Broker are installed using the Parallels RAS installer (standard installation). All other components are push-installed from the RAS console. --- # Agent Instructions: Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter: ``` GET https://docs.parallels.com/landing/ras-reference-architecture/v20/deployment-scenarios/parallels-ras-deployment-scenarios/single-farm-with-public-and-private-ras-secure-gateways.md?ask= ``` The question should be specific, self-contained, and written in natural language. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.