What is a requirement for a non-traversal-enabled endpoint to endpoint to connect to a VCS Expressway?

A.
There must be a firewall between the endpoint and the VCS Expressway to control access

B.
There must not be a firewall between the endpoint and the VCS Expressway

C.
The endpoint must frist connect to a VCS Control

D.
The endpoint and the VCS Expressway must both be located inside of the DMZ