It is mentioned in the documentation that, for Active Gate that would be supplied with Network-Zone paramter, below is required:
"In the demilitarized zone, install ActivGates for RUM with MSGrouter parameter set to false."
What is rationale behind this? I'm not able to appreciate the reason/benefit behind this advice/step.
It's to exclude ActiveGate to handle OneAgent traffic - so by no means traffic from internal network will route "back" over the demilitarized zone. Usually in that zone you want to only have RUM from public zones handled.