Is reverse Proxy required for external web

%3CLINGO-SUB%20id%3D%22lingo-sub-1507164%22%20slang%3D%22en-US%22%3EIs%20reverse%20Proxy%20required%20for%20external%20web%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1507164%22%20slang%3D%22en-US%22%3E%3CP%3ERunning%20Skype%20Business%202019.%3C%2FP%3E%3CP%3EUsing%20a%20Fortigate%20firwall.%3C%2FP%3E%3CP%3EEdge%20is%20working%20but%20reading%20in%20many%20place%20that%20RP%20is%20require%20to%20access%20Web%20Services%20(meet%2C%20dial%2C%20lyncdiscover)%20from%20external%20users.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ECan%20I%20just%20forward%20traffic%20from%20443%20to%204443%20on%20my%20fortigate%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EJohn%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1507164%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EMobile%20Client%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1516259%22%20slang%3D%22en-US%22%3ERe%3A%20Is%20reverse%20Proxy%20required%20for%20external%20web%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1516259%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F14698%22%20target%3D%22_blank%22%3E%40Jean%20Philippe%20Breton%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHi%20John%2C%20yes%20it%20is%20recommended%20that%20a%20reverse%20proxy%20is%20used%20and%20for%20external%20web%20services%2C%20this%20is%20the%20supported%20route.%20Whilst%20performing%20port%20forwarding%20on%20the%20firewall%20can%20achieve%20the%20desired%20result%20this%20does%20also%20cause%20a%20security%20concern%2C%20reverse%20proxy's%20are%20often%20deployed%20in%20a%20DMZ%20between%20the%20internet%20and%20the%20front%20end%20server%20itself.%20If%20your%20Fortigate%20does%20not%20have%20built%20in%20reverse%20proxy%20functionality%2C%20you%20can%20use%20the%20Web%20Application%20Proxy%20which%20is%20a%20part%20of%20Windows%20Server.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E------------------%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fwww.siplifi.com%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fwww.siplifi.com%3C%2FA%3E%26nbsp%3B%7C%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F685927%22%20target%3D%22_blank%22%3E%40SiplifiGroup%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Occasional Contributor

Running Skype Business 2019.

Using a Fortigate firwall.

Edge is working but reading in many place that RP is require to access Web Services (meet, dial, lyncdiscover) from external users.

 

Can I just forward traffic from 443 to 4443 on my fortigate?

 

John

1 Reply
Highlighted

@Jean Philippe Breton 

 

Hi John, yes it is recommended that a reverse proxy is used and for external web services, this is the supported route. Whilst performing port forwarding on the firewall can achieve the desired result this does also cause a security concern, reverse proxy's are often deployed in a DMZ between the internet and the front end server itself. If your Fortigate does not have built in reverse proxy functionality, you can use the Web Application Proxy which is a part of Windows Server. 

 

------------------

 

https://www.siplifi.com | @SiplifiGroup