Forum Discussion

Mihail Stacanov's avatar
Mihail Stacanov
Copper Contributor
Feb 27, 2018

SharePoint Server 2013 Foundation Web/App Server two network adapters

Hi all,

 

is this scenario supported by Microsoft and make sense?

 

SharePoint 2013 Foundation Web/App Server will have one adapter with public and one adapter with private IP Address?

Routing between two adapters will be configured.

SharePoint Server will have connection to SQL using internal adapter (private IP)

Firewall will be on SharePoint Server from Windows configured

 

What are the security and configuration concerns here?

 

Many thanks in advance.

 

Kind Regards,

Mihail Stacanov

sharepoint server

3 Replies

    • Mihail Stacanov's avatar
      Mihail Stacanov
      Copper Contributor
      Feb 28, 2018

      thanks,

       

      the goal is to avoid configuration of external non windows firewalls.

       

      the issue is here that I still can't understand as here written, that in this case firewall will not work: as answered to me here: https://social.technet.microsoft.com/Forums/sharepoint/en-US/aefa3c77-7947-4ff1-a7fb-eaa6aaeea569/sharepoint-server-2013-foundation-webapp-server-two-network-adapters?forum=sharepointadmin

      But I can't understand why if I configure firewall for each profile: domain and private. Why will it not work?

       

      Thanks

      • Trevor Seward's avatar
        Trevor Seward
        MVP
        Feb 28, 2018
        I'd strongly recommend not going down this path. All web-based applications should be fronted by a dedicated service to firewall traffic. In addition, for defense-in-depth, use a Reverse Proxy in front of SharePoint. There are plenty of free options (HAProxy, Nginx, Apache's mod_ssl).

        It's not that your scenario _won't_ work, but it isn't the best security by any means.