SMG integrate with AD

Hi,

Anyone integrate SMG with AD?

What's the recommended practise to have this configure? To allow SMG (at DMZ) to query the domain controller directly which is in the internal segment?

Is it a good idea to setup this way?

I'm just now comfortable to have the SMG querying the domain controller directly.

Please advise.