For management functions, an Application Delivery Controller (ADC) or a reverse proxy is required in the core to support the tunnel between the branch and the System Manager. A tunnel is an outbound connection from the branch to the core and does not contain any inbound connection. The tunnel supports bidirectional traffic between System Manager and Branch Session Manager (BSM) for all management functions, including database replication.