Some of our devices require firmware updates for additional functionality. This can only done by our supplier.
We can use OpenVPN and an API token, but this gives network access to our entire private EMnify cloud. We would like to restrict access to either an individual IP address or an additional IP address space (subnet).
We could implement our own DMZ server with a OpenVPN client and NAT, but that is a responsibility we would rather not take on.