Forum Discussion

Mihail Stacanov's avatar
Mihail Stacanov
Copper Contributor
Feb 27, 2018

SharePoint Server 2013 Foundation Web/App Server two network adapters

Hi all,   is this scenario supported by Microsoft and make sense?   SharePoint 2013 Foundation Web/App Server will have one adapter with public and one adapter with private IP Address? Rout...
sharepoint server
Trevor Seward's avatar
Trevor Seward
MVP
Feb 27, 2018
Yes, it'll work. It's a bit complicated to support; what is your goal?
  • Mihail Stacanov's avatar
    Mihail Stacanov
    Copper Contributor
    Feb 28, 2018

    thanks,

     

    the goal is to avoid configuration of external non windows firewalls.

     

    the issue is here that I still can't understand as here written, that in this case firewall will not work: as answered to me here: https://social.technet.microsoft.com/Forums/sharepoint/en-US/aefa3c77-7947-4ff1-a7fb-eaa6aaeea569/sharepoint-server-2013-foundation-webapp-server-two-network-adapters?forum=sharepointadmin

    But I can't understand why if I configure firewall for each profile: domain and private. Why will it not work?

     

    Thanks

    • Trevor Seward's avatar
      Trevor Seward
      MVP
      Feb 28, 2018
      I'd strongly recommend not going down this path. All web-based applications should be fronted by a dedicated service to firewall traffic. In addition, for defense-in-depth, use a Reverse Proxy in front of SharePoint. There are plenty of free options (HAProxy, Nginx, Apache's mod_ssl).

      It's not that your scenario _won't_ work, but it isn't the best security by any means.