I've posted in someone else's thread but thought I'd start my own as that's marked as solved. Scenario is standalone RDS server running as RD broker, gateway, web server, host with Duo RD Gateway and RD web. Gateway protection is working fine via Duo...