Forum Discussion
Mihail Stacanov
Feb 27, 2018Copper Contributor
SharePoint Server 2013 Foundation Web/App Server two network adapters
Hi all,
is this scenario supported by Microsoft and make sense?
SharePoint 2013 Foundation Web/App Server will have one adapter with public and one adapter with private IP Address?
Rout...
Mihail Stacanov
Feb 28, 2018Copper Contributor
thanks,
the goal is to avoid configuration of external non windows firewalls.
the issue is here that I still can't understand as here written, that in this case firewall will not work: as answered to me here: https://social.technet.microsoft.com/Forums/sharepoint/en-US/aefa3c77-7947-4ff1-a7fb-eaa6aaeea569/sharepoint-server-2013-foundation-webapp-server-two-network-adapters?forum=sharepointadmin
But I can't understand why if I configure firewall for each profile: domain and private. Why will it not work?
Thanks
Feb 28, 2018
I'd strongly recommend not going down this path. All web-based applications should be fronted by a dedicated service to firewall traffic. In addition, for defense-in-depth, use a Reverse Proxy in front of SharePoint. There are plenty of free options (HAProxy, Nginx, Apache's mod_ssl).
It's not that your scenario _won't_ work, but it isn't the best security by any means.
It's not that your scenario _won't_ work, but it isn't the best security by any means.