About this guide - PKI Solutions | PKI Cybersecurity ...

To achieve these security goals, NDES should be deployed on the internal corporate network. In addition, a Web Application Proxy (WAP) server should be used in a DMZ to publish a reverse proxy to the NDES enrollment interface. DMZ firewall controls should be carefully defined to allow only desired traffic to reach the NDES server. ................
................