Does this statement correctly describe a function of the Virtual Appliance (VA)?

The statement correctly describes the communication model used by SailPoint Virtual Appliances. The critical architectural principle is that communication between a customer-hosted VA and Identity Security Cloud is initiated outbound from the VA . SailPoint does not establish unsolicited inbound connections from its cloud environment directly into the customer's VA.

SailPoint specifically documents that each VA makes continuous outbound-only calls to the cloud environment and polls the cluster queue for requested actions , including aggregation and provisioning work. The appliance retrieves the work assigned to its cluster, executes the appropriate connector operation against the customer source, and communicates the resulting information back to Identity Security Cloud.

This polling model is significant from a network-security perspective because customers do not need to create inbound firewall rules allowing Identity Security Cloud to initiate sessions into their internal environment. Instead, the VA requires appropriate outbound connectivity to SailPoint's required endpoints.

Therefore, describing VAs as initiating communication to their cluster queue accurately reflects the supported VA architecture.

Study Guide Reference: Virtual Appliances — VA Cluster Architecture, Cluster Queue Polling, Outbound-Only Communication and Connector Operations.

===============