Fortinet SSL VPN w/ Radus & AD_Client

I’ve was able to setup the Fortinet SSL VPN w/ Radus & AD_Client (using 2FA for Fortinet FortiGate SSL VPN Clients with RADIUS Auto Push | Duo Security)
The proxy service and domain controller (I’m using AD_client) live on the LAN side of Fortigate.

Would it be possible to move both (or either) to the WAN? A.K.A., could the proxy and DC live in the cloud