A county library kiosk VLAN must enroll devices in Workspace ONE UEM through AirWatch Cloud Connector but must not browse the open internet. Which firewall design meets both goals?
Select an answer to reveal the explanation.
Short Explanation
Library kiosks need a hallway to the enrollment desk, not a door to the whole internet. Allow the UEM enrollment, device-services, and AWCM paths, and stop there.
Full Explanation
Workspace ONE UEM enrollment and device communication use documented destinations including AirWatch Cloud Connector and AWCM, not general internet browsing. Scoped allows on those FQDNs and ports enroll the kiosks without a wide outbound 443 hole. Blocking ACC entirely breaks enrollment, and SMB or RDP to the connector is not an enrollment path.