SharePoint Server 2013 Foundation Web/App Server two network adapters

[Mihail Stacanov]

Hi all,

is this scenario supported by Microsoft and make sense?

SharePoint 2013 Foundation Web/App Server will have one adapter with public and one adapter with private IP Address?

Routing between two adapters will be configured.

SharePoint Server will have connection to SQL using internal adapter (private IP)

Firewall will be on SharePoint Server from Windows configured

What are the security and configuration concerns here?

Many thanks in advance.

Kind Regards,

Mihail Stacanov

[#2]

Yes, it'll work. It's a bit complicated to support; what is your goal?

[#3]

thanks,

the goal is to avoid configuration of external non windows firewalls.

the issue is here that I still can't understand as here written, that in this case firewall will not work: as answered to me here: https://social.technet.microsoft.com/Forums/sharepoint/en-US/aefa3c77-7947-4ff1-a7fb-eaa6aaeea569/sh...

But I can't understand why if I configure firewall for each profile: domain and private. Why will it not work?

Thanks

[#4]

I'd strongly recommend not going down this path. All web-based applications should be fronted by a dedicated service to firewall traffic. In addition, for defense-in-depth, use a Reverse Proxy in front of SharePoint. There are plenty of free options (HAProxy, Nginx, Apache's mod_ssl).

It's not that your scenario _won't_ work, but it isn't the best security by any means.