The Unified Access Gateway appliance is deployed on the DMZ. Deployment involves installing the Unified Access Gateway components and the AirWatch components such as Agent and Tunnel Proxy services
Deploying the AirWatch Tunnel for your AirWatch environment involves setting up the initial hardware, configuring the server information, and app settings in the AirWatch Admin Console, downloading an installer file, and running the installer on your AirWatch Tunnel server.
You can manually configure each of the edge services after the OVF installation is completed and the values are changed.
For more information on deploying Unified Access Gateway with AirWatch, see https://resources.air-watch.com/view/vb7zp7wwhpw756m2pfxy.