> What surprised me is that user connections coming from the internet are also seen on the third connection server (which is installed as a replica).
Do you mean you see them listed in the admin UI? If so, that's by design- all three servers are sharing the same information and display all View desktop sessions in the environment.