The final role that we need to install is the OpsMgr Gateway server. This role enables OpsMgr agent communication across different security boundaries – such as DMZ and untrusted Active Directory domains. The Gateway server can also be used to compress agent traffic across slow WAN links inside a Management Group domain.
In our example for this book, the Gateway server is a member of an untrusted Active Directory domain and we will need to utilize a public key infrastructure (PKI) for certificate-based authentication back into the OpsMgr Management Group.
Here's what we need before we begin: