We are setting up an Angular/MVC web application on our client\'s infrastructure where they have several stringent security policies. We have web / App /DB in 3 separate VMs run