Forum Discussion
Paul Bendall
Aug 25, 2017Iron Contributor
Multi-homed Server 2016, NLA & best practice
Not really specific to 2016 but just in case things have changed I am most interested in this version of the server OS. The topic of correctly (securely) configuring a multi-homed server in a non-...
Ed Gallagher
Aug 28, 2017Brass Contributor
Hi Paul.
If you think about it, NLA is useful for end user systems that move from network to network. And like most "wizardy" things, it makes assumptions about any situation that it is in. Servers would not normally be moved from network to network, dynamically changing the firewall settings needed.
With server, the best practice, multi homed or not, would be to block all trafic and then only allow the traffic required to pass in or out via the firewall advanced configuration. You could apply all rules to all profiles and control the traffic via source/destination IP/port configuration.
Hope this helps.
Ed Gallagher, MVP