An Expressway-E is configured using a single NIC with NAT. How must the Expressway-C traversal client zone be configured to connect to the Expressway- E?

TLS verify mode is a security setting for certificate validation and is not the specific configuration needed to resolve connectivity when NAT is in use.

The zone profile setting defines protocol behavior defaults and does not address the routing issue caused by a NAT address mismatch.

With a single NIC and NAT configured on Expressway-E, the internal LAN IP is not directly reachable from Expressway-C across the DMZ or firewall boundary. The Expressway-C must use the NAT (external) IP address as the peer address so that traffic is correctly routed to the Expressway-E's public-facing interface.

Using the LAN 1 (internal) IP address would fail because that private address is not routable from the Expressway-C when NAT separates the two devices.