Horizon Security Gateway is the server-side component for the secure HTTPS connection between client systems and an Unified Access Gateway appliance, or connection broker instance.
When you configure the tunnel connection for the connection broker, RDP, USB, and Multimedia Redirection (MMR) traffic is tunneled through the Horizon Security Gateway component. When you configure direct client connections, these protocols connect directly from the client to the remote desktop and are not tunneled through the Horizon Security Gateway component.
Horizon Security Gateway is also responsible for forwarding other web traffic, including user authentication and desktop and application selection traffic, from clients to the connection broker. Horizon Security Gateway also passes Horizon console client web traffic to the Horizon Administration component.