Why MSGrouter is advised to set to false only for those in DMZ? (and also only those with Networ-Zone-paramter enable?)

[waikeat_chan]

It is mentioned in the documentation that, for Active Gate that would be supplied with Network-Zone paramter, below is required:

"In the demilitarized zone, install ActivGates for RUM with MSGrouter parameter set to false."

What is rationale behind this? I'm not able to appreciate the reason/benefit behind this advice/step.

Best Regards,

Wai Keat

[Radoslaw_Szulgo · Accepted solution]

It's to exclude ActiveGate to handle OneAgent traffic - so by no means traffic from internal network will route "back" over the demilitarized zone. Usually in that zone you want to only have RUM from public zones handled.