Remote property assessors must reach Horizon desktops from home. The city does not want Connection Servers on the internet. Which product should sit in the DMZ as the Horizon remote gateway?
Select an answer to reveal the explanation.
Short Explanation
UAG is the locked front door in the alley (the DMZ). Assessors knock there; Connection Servers stay inside the building. NSX T0, Boxer, and a public App Volumes Manager are not the certified Horizon edge.
Full Explanation
Remote property assessors who must reach Horizon desktops from home while the city refuses to place Connection Servers on the internet need Unified Access Gateway in the DMZ proxying Blast or PCoIP and broker XML-API traffic. UAG is the associate-depth Horizon remote gateway so Connection Servers remain on the internal municipal network behind a controlled edge. NSX Edge T0 advertising Blast as an overlay segment is not the Horizon remote-access appliance answer on this EUC exam. Workspace ONE Boxer provides managed email and is not a VDI gateway. Publishing App Volumes Manager through a public load balancer exposes application-layering infrastructure incorrectly and does not replace UAG for Horizon sessions. Exam caveat: UAG authenticates and proxies at the edge while Connection Server remains the broker—do not publish the broker VIP to the internet as a shortcut, and do not confuse UEM mail proxies with Horizon display gateways. Operational check: configure Horizon Client to the UAG external FQDN, complete an assessor home session over Blast, confirm Connection Server has no inbound internet path in the firewall policy, and verify Boxer and App Volumes Manager are absent from the remote display data path.