Re: need some documentation

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

With a reverse proxy you would get it to rewrite any URLs you need.


On 15/12/05 16:21, in article u9sClOZAGHA.1312@xxxxxxxxxxxxxxxxxxxx, "Jay
Taylor" <help4u@xxxxxxxxx> wrote:

> Thanks Steve -
>
> I will look into that....We dont use ISA a lot and hence I am a little
> apprehnsive.
>
> We basically have set up another AD domain for Sharepoint External
> users...with trust relatioships...so that should allay the fears about
> Active Directory.
>
> The other problems I face with my configuration are with namespaces...I have
> to idea how to handle this...would my front-end server
>
> For instance...if I have to navigate from an area to a site...it eventually
> uses the url for the internal server....for which you need to authenticate
> again and that completely destroys my purpose of having a server in the dmz.
>
> Let me know if you have any thoguhts in this regards,
>
> "Steven Collier [MVP]" <steven.collier@xxxxxxxx> wrote in message
> news:BFC62D5E.4220%steven.collier@xxxxxxxxxxx
>> That's actually not really a typical way people would deploy things these
>> days.
>>
>> In simple terms, as long as the ports required to talk to SQL are open it
>> should work fine (generally this is port 1433). The issue comes when you
>> think about how active directory should be set up so the SharePoint boxes
>> can authenticate the users. Exposing your AD to a box in the DMZ is not
>> particularly good practice.
>>
>> The more standard approach would be to keep SharePoint entirely internal
>> and
>> put an ISA server in your DMZ to proxy requests from external parties and
>> feed them through to the inside. You'll find some white papers around
>> about
>> how you can use this reverse-proxying technique with SharePoint.
>>
>> Steven
>>
>>
>> On 14/12/05 18:54, in article OGiNL$NAGHA.1028@xxxxxxxxxxxxxxxxxxxx, "Jay
>> Taylor" <help4u@xxxxxxxxx> wrote:
>>
>>> I want to host a sharepoint web server in the DMZ and connect it to the
>>> SQL
>>> dataserver in my private network. I need some documentation on how to
>>> configure this. Any help will be appreciated,
>>>
>>> thanks !
>>>
>>>
>>
>
>

.

Relevant Pages

  • Re: Gurus: server on perimeter vs. corporate advice
    ... But if you put the Sharepoint in the "DMZ", you would need to open various ... ports to allow communication from the DMZ to the Internal network (I think ... When you "open" such ports for a server that resides in the DMZ, ...
    (microsoft.public.security)
  • Re: A Good Reverse Proxy Product
    ... How about an SSL VPN device... ... Still place the OWA box in the DMZ, but don't allow direct access to it, only through the VPN... ... A Good Reverse Proxy Product ... We have a new MS Exchange server and the administrator wants to provide remote ...
    (Security-Basics)
  • Re: Outlook web access
    ... We use apache in our DMZ configured as a reverse proxy to talk to an Inotes ... server. ...
    (Security-Basics)
  • Re: need some documentation
    ... I will look into that....We dont use ISA a lot and hence I am a little ... We basically have set up another AD domain for Sharepoint External ... again and that completely destroys my purpose of having a server in the dmz. ...
    (microsoft.public.sharepoint.portalserver)
  • Re: SharePoint in der DMZ
    ... SharePoint haben. ... Wir bauen hier gerade ein Back to Back Szenario mit dem ISA 2004 auf. ... Unsere Webserver sollen eigentlich alle in die DMZ. ... und Index Server in der DMZ platzieren, die SQL und Mail Server ins ...
    (microsoft.public.de.german.sharepointportalserver)