To prevent direct connections to an Aspera transfer server, Aspera FASP Proxy can be deployed in the enterprise DMZ to hide the server IP, handle incoming client connections, and manage FASP sessions between outside Aspera clients and the internal servers.