RAS Secure Gateway

Source	Destination	Protocol	Port	Description
RAS Secure Gateway in Forwarding mode	RAS Secure Gateway in Normal mode	TCP, UDP TCP, UDP	80, 443 3389	Management and user session connections. Optional - Used for user session if RDP Load Balancing is enabled.
	RAS Performance Monitor	TCP	8086	Agent (Telegraf service) sends collected performance data to InfluxDB.
RAS Secure Gateway in Normal mode	Remote Desktop Services	TCP, UDP	3389	RDP Connections.
	RAS Connection Broker	TCP TCP, UDP	20002 20009	RAS Connection Broker service port - communications with RAS Secure Gateways and the RAS Console (in Normal mode only). Device Manager shadowing via Firewall (indirect network connection) if RAS Console runs on RAS Connection Broker
	RAS Performance Monitor	TCP	8086	Agent (Telegraf service) sends collected performance data to InfluxDB.
	Localhost	TCP	20020	Communication with User Portal web server (NodeJS).

Source

Destination

Protocol

Port

Description

RAS Secure Gateway in Forwarding mode

RAS Secure Gateway in Normal mode

TCP, UDP

80, 443

3389

Management and user session connections.

Optional - Used for user session if RDP Load Balancing is enabled.

RAS Performance Monitor

TCP

8086

Agent (Telegraf service) sends collected performance data to InfluxDB.

RAS Secure Gateway in Normal mode

Remote Desktop Services

TCP, UDP

3389

RDP Connections.

RAS Connection Broker

TCP

TCP, UDP

20002

20009

RAS Connection Broker service port - communications with RAS Secure Gateways and the RAS Console (in Normal mode only).

Device Manager shadowing via Firewall (indirect network connection) if RAS Console runs on RAS Connection Broker

RAS Performance Monitor

TCP

8086

Agent (Telegraf service) sends collected performance data to InfluxDB.

Localhost

TCP

20020

Communication with User Portal web server (NodeJS).