...
In the case of the ICG, endpoint devices connect to the ICG as well as the UMS connects to the ICG, see Devices and UMS Server Contacting Each Other via ICG. The WebSocket communication between the ICG and the UMS as well as between the ICG and the device is only established after mutual authentication, and the communication is encrypted with TLS. All data is routed through this WebSocket.
...
Legend to the image:
: Shows that the traffic in the WebSocket runs in both directions.
(multicolored): Shows from which side firewalls etc. must be opened.
...
Another possibility to route the traffic via port 8443 is to use a reverse proxy. The reverse proxy will forward the requests from devices to the UMS.
...
Legend to the image:
: Shows that the traffic in the WebSocket runs in both directions.
(multicolored): Shows from which side firewalls etc. must be opened.
...