...
When the TCP channel access remote-endpoint is not on the EVE device (not part of the Dom0 or application domains), then it is considered as 'External Access'. For instance, the 'Local Profiler' Linux server on the same LAN as with the EVE device is an 'External' endpoint.
...