2 of 2 people found this helpful
This sort of deployment pattern is actually considered an "anti best practice" by our services team. In order to accomplish something like this you'll have to open many ports between the DMZ and your internal network so that the gateway component can talk to various parts of Tableau. To be blunt, "Don't do this". It is not a good idea
Instead, put a reverse proxy in your DMZ. You can choose to terminate SSL there (or not), and open up a SINGLE port between your DMZ and internal network. It is safer, and easier.
Hope that helps!