Step-By-Step: Implementing Azure AD Password Protection On-Premises

Hi ebellido170,
I need to be clear, don't do it in a production environment! :)
If your environment is in sync with AAD you can deploy de proxy on the AD Connect (that already have an internet connection) like indicated in the following reference:
=========================================================================================
Reference: https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-password-ban-bad-on-pre...
Question: Is it okay to deploy the Azure AD Password Protection Proxy service side by side with other services such as Azure AD Connect?

Answer: Yes. The Azure AD Password Protection Proxy service and Azure AD Connect should never conflict directly with each other.

Unfortunately, an incompatibility has been found between the version of the Microsoft Azure AD Connect Agent Updater service that is installed by the Azure AD Password Protection Proxy software and the version of the service that is installed by the Azure Active Directory Application Proxy software. This incompatibility may result in the Agent Updater service being unable to contact Azure for software updates. It is not recommended to install Azure AD Password Protection Proxy and Azure Active Directory Application Proxy on the same machine.
=========================================================================================
Many thanks for you question  😉
Daniele De Angelis