Where is the recommanded location (DMZ or Server zone) to implement the publisher in the firewall protected environment? All the port need to be opened to the back-end servers on the firewall?
is the traffice flow is correct?
End-users → tunnel → publisher -->(open all required ports on the FW ) → App servers