When corporate guidelines mandate that all cloud-to-on-premise traffic must pass through a secure firewall, the architecture must support a Demilitarized Zone (DMZ) or "Perimeter Network" strategy. The Integration Architect must evaluate whether the middleware solution includes a robust API Gateway component.
A secure API Gateway acts as the single entry point for all external requests. It is typically deployed within the DMZ to terminate incoming TLS connections from the cloud (Salesforce) and perform deep packet inspection, IP whitelisting, and authentication before proxying the request to internal on-premise resources.
This provides a critical layer of insulation, ensuring that internal services-such as an ERP or legacy database-are never exposed directly to the public internet.
While OAuth enforcement (Option B) is a common requirement for authorization, it does not fulfill the specific network-level firewall requirement described. Similarly, ODBC connectivity (Option C) is a low- level internal database protocol that should generally be avoided for cross-firewall communication due to its inherent security risks. By selecting a middleware solution with integrated API Gateway capabilities, Northern Trail Outfitters can provide the security team with centralized control over encryption, rate limiting, and threat protection, thereby strictly adhering to the new Corporate Security Guidelines while enabling seamless hybrid cloud integration.