I am deploying DRS on three servers. I see for security purposes the Internet Proxy is in the DMZ and the Mobile Gateway can be in the DMZ. normally I do not join machines to the domain that are in the DMZ. so does that mean that the only machine that should be domain joined is the Central Server? I am asking because I am having some issues with the Mobile Gateway (message says Mobile Gateway is not configured for centralized mode) and I am wondering if its because the Mobile Gateway machine is not joined to the domain.
does the Mobile gateway being brought out of the DMZ and into the corporate LAN and joined to the domain affect security that much? can I get a few pro vs cons on having the mobile gateway in the DMZ vs not having it in the DMZ please