RAS Management Portal
ProductsSupportPartnersDocumentation
English
English
  • Introduction
    • Parallels RAS 19 release history
    • Overview
    • What's new
  • Installation and Configuration
    • Prerequisites
    • Installation
  • Get Started with RAS Management Portal
    • Log in to RAS Management Portal
    • Configure RAS Web Administration Service
    • RAS Management Portal user interface
  • Site Category
  • Farm Settings
    • Administrators
    • Mailbox
    • Licensing
  • Site Settings
    • Connection and authentication
    • Multi-factor authentication
      • Using RADIUS
      • Using Google Authenticator
      • Configuring MFA rules
    • FSLogix Profile Container
      • Configure managing existing profiles by Parallels RAS
      • Configure Site defaults and hosts for FSLogix
    • Universal Printing
    • Universal Scanning
  • Infrastructure
    • RD Session Hosts
      • Add an RD Session Host
      • Configure an RD Session Host
        • Using Site or host pool defaults
        • General
        • Agent Settings
        • User Profile
        • Desktop Access
        • Printing and Scanning
      • Manage an RD Session Host
        • Overview
        • Active Sessions
        • Running Resources
        • Running Processes
        • Troubleshooting
      • RDSH groups
    • Virtual Desktops Infrastructure
    • Certificates
      • Generate a self-signed certificate
      • Generate a certificate signing request (CSR)
      • Let's Encrypt certificates
        • Working with Let's Encrypt certificates
        • How Parallels RAS requests certificates from Let's Encrypt
      • Import a certificate from a file
      • Export a certificate to a file
      • Assign a certificate to Gateways and HALB
    • Gateways
      • Add a Gateway
      • Configure a Gateway
        • General
        • Mode
        • Network
        • SSL/TLS
          • Client and Server configurations
        • User Portal
          • Web
        • Wyse
        • Security
      • Managing Gateways
    • Connection Brokers
      • Configure RAS Connection Broker
      • Add a secondary Connection Broker
      • Manage RAS Connection Brokers
    • Providers
    • Site defaults
  • Sessions
    • Overview
    • Session information
    • User sessions
    • Running resources
  • Publishing
    • Publish an application
    • Publish a desktop
    • Publish a document
    • Publish a folder on the file system
    • Manage published resources
      • Manage published applications
      • Manage published desktops
      • Manage folders
      • Site defaults (Publishing)
      • Using filtering rules
      • Configuring preferred routing
  • Monitoring
    • Overview
    • Install RAS Performance Monitor
    • Enable monitoring in RAS Management Portal
    • Viewing performance metrics
    • Configure RAS Performance Monitor Security
  • Updating RAS Agents
  • Help and Support
  • Appendix
    • Microsoft license requirements in Parallels RAS
    • Port reference
      • Parallels Client
      • Web browsers
      • HALB
      • RAS Secure Gateway
      • RAS Connection Broker
      • RAS Console
      • SSRS
      • RAS Reporting
      • RAS Web Administration Service (REST/Management Portal)
      • RAS PowerShell
      • RAS Provider Agent
      • RAS Enrollment Server
      • RAS RD Session Host Agent
      • RAS Guest Agent
      • RAS Remote PC Agent
      • Tenant Broker
      • Active Directory and Domain Services ports
      • Azure Virtual Desktop
    • RAS performance counters
Powered by GitBook

Social media

  • Facebook
  • Twitter
  • LinkedIn
  • YouTube

Other Resources

  • Feedback

© 2025 Parallels International GmbH. All rights reserved.

On this page
  • Setting the normal mode
  • Setting the forwarding mode

Was this helpful?

Export as PDF
  1. Infrastructure
  2. Gateways
  3. Configure a Gateway

Mode

RAS Secure Gateway can operate in one of the following modes:

  • Normal Mode: RAS Secure Gateway receives user connection requests and checks with RAS Connection Broker if the user making the request is allowed access. Gateways operating in this mode can support a larger number of requests and can be used to improve redundancy.

  • Forwarding Mode: RAS Secure Gateway forwards user connection requests to a preconfigured Gateway. Gateways in forwarding mode are useful if cascading firewalls are in use, to separate WAN connections from LAN connections and make it possible to disconnect WAN segments in the event of issues without disrupting the LAN.

Note: To configure the forwarding mode, the RAS Site must have more than one RAS Secure Gateway installed.

To use Site default settings, click the Inherit Defaults option. To specify your own settings, clear the option.

Setting the normal mode

To set the normal mode, in the Gateway mode drop-down list, select Normal.

The Preferred Connection Broker drop-down list allows you to specify a RAS Connection Broker that the gateway will connect to. This is helpful when Site components are installed in multiple physical locations communicating through WAN. You can decrease network traffic by specifying a more appropriate Connection Broker. For the gateway to select a Connection Broker automatically, select the Automatic option.

The Forward requests to HTTP Server option allows you to forward requests that do not belong to RAS Secure Gateways (gateways handle HTML5 traffic, Wyse, and URL scheme). To specify multiple servers, separate them with a semicolon. An HTTP server can be specified using an IPv6 address if necessary. Please note that the HTTP server must support the same IP version as the browser making the request.

Setting the forwarding mode

To configure the forwarding mode, in the Gateway mode drop-down list, select Forwarding and specify one or more Gateways. A gateway in forwarding mode will forward all the user connection requests to a pre-configured gateway. Gateways in forward mode are useful if cascading firewalls are in use, to separate WAN connections from LAN connections and make it possible to disconnect WAN segments in the event of issues without disrupting the LAN.

PreviousGeneralNextNetwork

Last updated 1 year ago

Was this helpful?