You can turn off the connection server gateways independtly even if they are replicas. If you use UAGs the secure gateways are moved to the UAG so you need to have them off/
