Air-gapped

An air-gapped device is fully isolated from the internet and from connected networks: no cable, no Wi-Fi, no bridge. It is the strictest isolation that exists against remote attacks.

The Ubidesk agent works through an outbound HTTPS connection on port 443, so a network path must exist. A strictly air-gapped machine cannot be reached remotely — which is precisely the point of its isolation.

In practice

For industrial estates, the common architecture is a bastion: isolated machines stay cut off, and a monitored gateway gives access to the administration workstations.