# Publishing on-premises HES for remote users

### HES connection to on-premise AD via Application Proxy

If you need to connect HES to on-premises AD while providing access from the internet, you need to deploy the server inside the company's corporate network and make it accessible from the internet using Azure AD and Application Proxy: More information about Azure Active Directory Application Proxy: 

<figure><img src="https://content.gitbook.com/content/RdTysrljwe610dPFG7tE/blobs/ugiiYm7T5n5vbyhvSZqp/image.png" alt=""><figcaption></figcaption></figure>

{% hint style="info" %}
Please refer to the guide for more information:

* [Microsoft Entra application proxy documentation](https://learn.microsoft.com/en-us/entra/identity/app-proxy/)
  {% endhint %}