A single on-prem WLC must not be exposed to the Internet. How can RSSI updates be securely sent to Cisco DNA Spaces?

Deploying a Cisco DNA Spaces connector as a VM is the correct solution because it acts as a secure intermediary, collecting RSSI data from the on-prem WLC and securely forwarding it to Cisco DNA Spaces in the cloud. This prevents direct internet exposure of the WLC while ensuring data delivery. Tethering with Cisco DNA Center is used for managing network devices and services, not specifically for securely forwarding RSSI data to DNA Spaces from an isolated WLC. Replacing the WLC with a cloud-based controller would expose the controller to the internet, violating the requirement. Implementing Cisco Mobility Services Engine (MSE) primarily provides location services and analytics but doesn't inherently solve the secure forwarding of RSSI data to DNA Spaces without exposing the WLC.