Welcome to ISAserver.org

Sharepoint server location

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Publishing] >> SharePoint Publishing >> Sharepoint server location

Page: [1]

Message

<< Older Topic Newer Topic >>

Sharepoint server location - 16.Oct.2006 10:56:57 AM

cgibson

Posts: 8
Joined: 9.May2006
Status: offline

Currently we are using a PIX 515 and have a rule to allow 443 traffic to our Sharepoint server on the inside. Soon I will be adding a MS Business portal to that server and I'm looking to implement ISA in the DMZ of my PIX as a web proxy. Should I leave the Sharepoint/Business portal server on the internal network of the PIX or should I move it to the DMZ of the ISA server and follow Tom's article showing how to place member servers in the DMZ?

I'm not sure if the following situation will be a deciding factor, but it is something I want to bring up. The way things stand now, anonymous users will not be accessing any pages on this server, but sometime down the road we may move our public site in house. Would it be worth the extra effort to place another web server in the DMZ of the pix to handle all anonymous connections for the public site, or would it be best to place the public site on the domain member server in the DMZ of the ISA firewall and allow anonymous access to that particular url?

Thanks!
-Cory

Post #: 1

Featured Links*

RE: Sharepoint server location - 20.Oct.2006 11:56:22 AM

tshinder

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Cory,

I'd put the anonymous access Web server in a DMZ, away from the authenticated access Web servers like SharePoint.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to cgibson)

Post #: 2

RE: Sharepoint server location - 20.Oct.2006 12:00:21 PM

cgibson

Posts: 8
Joined: 9.May2006
Status: offline

Thanks for your reply! Would you place the Sharepoint server on the private side of the network or in the DMZ of the ISA firewall?

(in reply to tshinder)

Post #: 3

RE: Sharepoint server location - 21.Oct.2006 12:42:33 PM

tshinder

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Cory,

If I were designing the solution, I'd put the public facing SPS machine on an authenticated access DMZ segment (which would be separate from an anonymous access DMZ segment), in the same way that the front-end Exchange Server should be placed in an authenticated access DMZ.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to cgibson)

Post #: 4

RE: Sharepoint server location - 23.Oct.2006 2:55:34 PM