The RDS Host must be configured to report to one or more PROXY Pro Gateways; it is through these connections that RDS session Host instances will be reached. Note that connection status icon next to Gateway entries and the Host Workstation ID are generic in the RDS Server Host template. These will be replaced by actual icons and values when the Host service is started in the RDS session (see RDS tab for an example). For security purposes, all connection attempts can be forced to go through the specified Gateways by selecting Permit connection only through listed Gateways on the Gateways tab. With this option, administrators can take advantage of Gateway-based security policies and prevent unauthorized connections via peer-to-peer or unlisted Gateways.