The answer is on the screenshot you've posted - nothing is going through the PCoIP Secure Gateway, but software clients are still establishing a HTTP(S) Secure Tunnel connection to the connection server. This is used for the framework channel (used to transport USB for software clients) and MMR, among other things. If you want true direct connections then this should also be turned off. Please check the administration guide for more details on this setting.
Mike