When running CA Access Gateway (SPS), what are the best practices for hardening it?
At first glance, set the CA Access Gateway (SPS) in a DMZ, which protects it from the internet and restricts the connection to the internal Policy Servers.
As per documentation: