DMZ Configuration with Internal and External Application Tiers in the Intranet Sharing the Applicati

We have configured our new E-Business 12.2.5 environment using a shared application filesystem with an external application tier included in the stack. We are currently using TLS/SSL termination on a Reverse Proxy in the DMZ. Our security team has stated the configuration is not secure and does not meet our requirements for DMZ configuration. They want any URL coming in to the DMZ from the intranet to be using https.

It is my understanding from reading Doc ID 1375670.1 that this configuration is not supported using a shared filesystem and we are currently setup correctly using the TLS/SSL termination with http to the DMZ firewall and SSL between the reverse proxy and the internet.