do it?
If you have external user accessing the gateway, you want them terminated in an untrusted zone.
But having A+ only tells something about your TLS hardening.
What about MFA, If you're using SAML make sure you're patched and fixed the security issues found last year and such