A security engineer is deploying a pair of Cisco Secure Firewall Threat Defense (FTD) appliances at a remote branch. The corporate FMC is located in the data center. Company policy requires that all device management traffic remain logically and physically separated from user/data traffic so that a compromise of the production data path cannot expose the management plane. The branch has a dedicated management network with its own switch and uplink back to the data center. Which management approach satisfies this requirement?