RESOLUTION:
The recommended configuration for this and the most secure would be to stand up a Primary Policy server exclusively for the DMZ in question. That would ensure all traffic for joins, policy evaluations and joins reside inside the DMZ removing any need for firewall ports to be opened.
This would have a secondary benefit of allowing for a unique Sudoers policy in the DMZ as well.
This would be true for Privilege Manager for Unix as well. The policy configuration would require more effort however as it can be more complex.
© 2024 One Identity LLC. ALL RIGHTS RESERVED. Feedback Terms of Use Privacy Cookie Preference Center