If you have configured DME to use an external MDM server (see MDM), it will typically be placed in the DMZ along with DME. The MDM server will have a connection to devices for management, and a connection to DME. DME uses this connection to check if a device is enrolled with the external MDM server before allowing the device to connect. For more information about setting up the MDM server, see the documentation of your MDM provider.
With external MDM added, the architecture looks like this:
For more information about working with external MDM, see Appendix B: External MDM integration.