I'm not sure about using a range of internal IP addresses, that could get messy. The certificate-based authentication with the Windows Device Trust agent sounds cleaner to me.
Option B seems like the way to go here. The Windows Cloud Agent and CyberArk Identity Connector with Integrated Windows Authentication should do the trick.
Milly
3 months agoCorazon
1 months agoMelissa
2 months agoMadonna
2 months agoSamuel
3 months agoLauryn
3 months agoRoslyn
3 months agoGlenna
3 months agoPaola
2 months agoLayla
2 months agoAlaine
2 months agoLatonia
3 months agoStephaine
3 months agoDierdre
3 months agoFelicitas
3 months agoEllsworth
3 months agoDyan
4 months ago