A firewall team is asked to open inbound 443 to Active Directory so Workspace ONE can look up users. What should the EUC operator say?
Select an answer to reveal the explanation.
Short Explanation
Do not cut a new street from the internet into the AD vault. The courier is Cloud Connector walking outbound; AD stays inside. NSX DFW and Connection Server are not that courier.
Full Explanation
AirWatch Cloud Connector's network model is outbound-initiated from the civic data center to SaaS UEM, so domain controllers need not accept inbound 443 from the internet. Opening inbound LDAP or HTTPS to every DC is the anti-pattern ACC exists to avoid. NSX Distributed Firewall does not replace the UEM connector. Horizon Connection Server is not published as the UEM directory proxy.