The UMS Console, or alternatively, an external VNC viewer, establishes a connection to the UMS server. The UMS server then establishes a TLS tunnel to the device. 

The following figures illustrate the communication between the UMS Console, the VNC viewer, the UMS server, and a device:

Internal VNC Viewer

External VNC Viewer