Abstract: According to an aspect, there is provided a method for conditionally enabling access to endpoint devices of a microsegment within a private network from a management console which is external to the private network. A secure edge device discovers all of the endpoint devices within the microsegment and identifies which endpoint devices are connectable devices. A secure lobby node conveys to the management console information identifying all of the endpoint devices and which endpoint devices are connectable devices. Thus, a user of the management console can easily learn what endpoint devices are in the microsegment and which endpoint devices are connectable devices, such that the user can then choose to remotely connect to one or more of the connectable devices. Notably, the secure lobby node and the secure edge device enable one-hop traffic between the management console and any of the connectable devices of the microsegment.

Abstract: According to an aspect, there is provided a method for conditionally enabling access to endpoint devices of a microsegment within a private network from a management console which is external to the private network. A secure edge device discovers all of the endpoint devices within the microsegment and identifies which endpoint devices are connectable devices. A secure lobby node conveys to the management console information identifying all of the endpoint devices and which endpoint devices are connectable devices. Thus, a user of the management console can easily learn what endpoint devices are in the microsegment and which endpoint devices are connectable devices, such that the user can then choose to remotely connect to one or more of the connectable devices. Notably, the secure lobby node and the secure edge device enable one-hop traffic between the management console and any of the connectable devices of the microsegment.