Hi Krishna, IAC-NonGateway cookie is created as a result of PRGatewayPing. PRgatewayPing is called during 'PegaCompositeGadgetMgr.JS' onLoad. if you are able to de-reference 'PegaCompositeGadgetMgr.JS' from your application, then you can avoid IAC-NonGateway cookie. I noticed that out of the box 'PegaCompositeGadgetMgr.JS' is referenced. Are you seeing IAC-NonGateway cookie in user portal or developer portal?
One more thing, I see PegaCompositeGadgetMgr as a final rule, so how do you want me to abstract this one from our application. Also if we de-reference what are the other consequences that we may encounter into.