@AlanMarquez
It really is dependent on your network setup and the security protocols you have in place. From a technical point of view, it is not required to put the Lansweeper scanning service that will be responsible to communicating with the relay service in the DMZ.
The VM should be able to make an outbound connection to the relay service and be able to communicate with the Lansweeper database located on the LAN.
From your device that has LsAgent installed, the scanned LsAgent data is sent securely over HTTPS (TLS 1.2) to the relay server in Microsoft Azure, where it is encrypted as well. Your Lansweeper scanning server can retrieve the scanned data from the relay server, after which it is deleted from the relay.
To use the relay server, ensure outbound traffic is allowed on your Lansweeper scanning server. Specifically, the scanning server must be able to make an outbound connection to port 443 of lsagentrelay.lansweeper.com, the cloud relay server.
Whether the scanning server resides in the DMZ or not is up to your preference.
