To enable remote workers to access an internal resource like an LDAP Public Directory, the Avaya Session Border Controller for Enterprise (SBCE) must securely proxy the non-SIP traffic. The specific feature designed for this purpose is the Application Relay. An administrator configures an Application Relay for the LDAP protocol (typically over TCP), defining the internal LDAP server as the destination and a listening port on the SBCE's public interface. This relay is the fundamental mechanism that allows the LDAP queries to traverse the SBCE securely from the external network to the internal enterprise network.

A. an LDAP End Point Policy Group: This is incorrect because "LDAP End Point Policy Group" is not a specific type of object in the SBCE. A standard End Point Policy Group is modified to apply the Application Relay rule, but the relay itself must be configured first.

B. a reverse proxy for LDAP: This is incorrect as "reverse proxy" is a generic industry term. While the Application Relay functions as a reverse proxy, the specific configuration item within the Avaya SBCE is called an "Application Relay".

D. an LDAP Server Flow: This is incorrect because Server Flows on the SBCE are specifically used to define routing paths for SIP signaling and their associated media streams, not for application-layer protocols like LDAP.

1. Avaya, "Administering Avaya Session Border Controller for Enterprise Release 10.1," Document Number NN43001-701, Issue 1.0, November 2022.

Section: Application Relay, Page 351. This section states, "Application Relay enables the Avaya SBCE to act as a proxy for various applications, such as, LDAP, HTTP, HTTPS, and XMPP... For example, you can use Application Relay to provide remote workers access to the corporate directory through LDAP." The document then details the procedure, which begins with creating the Application Relay object.

2. Avaya, "Avaya Session Border Controller for Enterprise Implementation and Maintenance," Course Code 4U00061I, Student Guide, Volume 1, Release 8.0, June 2019.

Module 7: Configuring Remote Worker, Lesson: Configuring Application Relay for LDAP, Page 241. This official courseware explicitly outlines the steps: "The configuration of LDAP for remote workers requires two steps: 1. Configure Application Relay for LDAP. 2. Add the Application Relay to the Remote Worker End Point Policy Group." This confirms that the Application Relay is the primary, distinct configuration item created for this purpose.