The docBlock device resides in the same network segment as the SharePoint application servers. Usually this is between the web front ends and the SQL Server. The docBlock does not receive any user requests directly, so there is no need to update HTTP routing rules to make the docBlock accessible to users through internal firewalls. The only entity that communicates with the docBlock are the SharePoint web front ends. The docBlock does not require any connectivity to the SQL Server or to the user directory (such as Active Directory) that SharePoint uses to authenticate users. All operational communications between the SharePoint farm and the docBlock appliances go over HTTP(S) traffic.