We are testing an on-premises Active Directory setup for managed Windows devices. The AD environment is inside a private network and is only reachable through VPN; it is not exposed to the internet.
Can this kind of private/on-prem AD be integrated with Hexnode UEM? If yes, what is the recommended architecture? Do we need a connector, VPN, inbound firewall rule, or specific ports for Hexnode to communicate securely with the AD?
64 Views
Hello @wilma ,
Yes. A private, on-premises Active Directory can be integrated with Hexnode UEM without exposing the AD server to the public internet.
The recommended approach is to use the Hexnode AD Agent within your internal network. The AD Agent initiates communication outbound to Hexnode, so Hexnode does not need inbound access to your private AD environment. A site-to-site VPN from Hexnode to your network is not required for this integration.
Ensure the machine running the AD Agent can communicate with your domain controllers internally, and allow the following outbound traffic from the AD Agent machine:
With this setup, your AD remains private while the agent securely syncs directory information with Hexnode UEM.
Regards,
Simon Scott
Hexnode UEM
Don't have an account? Sign up
What's new 
