Comments on: MOSS Split Back-to-Back in the Real World http://blog.rhysgoodwin.com/windows-admin/moss-split-back-to-back-in-the-real-world-part1/ I AM the system administrator. Who do I call? Fri, 03 Feb 2012 10:23:50 +0000 hourly 1 http://wordpress.org/?v=3.2.1 By: RhysGoodwin http://blog.rhysgoodwin.com/windows-admin/moss-split-back-to-back-in-the-real-world-part1/#comment-1407 RhysGoodwin Mon, 22 Aug 2011 21:46:41 +0000 http://blog.rhysgoodwin.com/?p=350#comment-1407 Thanks Praveen, Great solution! I tested reporting integration but we still haven't actually implemented it so this will be a big help. Cheers, Rhys Thanks Praveen, Great solution! I tested reporting integration but we still haven’t actually implemented it so this will be a big help.

Cheers,
Rhys

]]> By: Praveen http://blog.rhysgoodwin.com/windows-admin/moss-split-back-to-back-in-the-real-world-part1/#comment-1391 Praveen Sat, 20 Aug 2011 11:31:57 +0000 http://blog.rhysgoodwin.com/?p=350#comment-1391 Thanks for the nice write up. Here is small implementation of how to solve the issue to show the report in all zones. http://praveenbattula.blogspot.com/2011/08/customize-reportviewerwebpart-in-c-and.html Thanks for the nice write up. Here is small implementation of how to solve the issue to show the report in all zones.
http://praveenbattula.blogspot.com/2011/08/customize-reportviewerwebpart-in-c-and.html

]]> By: Rhys http://blog.rhysgoodwin.com/windows-admin/moss-split-back-to-back-in-the-real-world-part1/#comment-158 Rhys Fri, 24 Sep 2010 11:44:25 +0000 http://blog.rhysgoodwin.com/?p=350#comment-158 Hey you can email me firstname.lastname at gmail. Actually in the email alert for the comment the spaces are correct so I can see what you mean. Are you intending to use ISA server? Ie Xnet Firewall is ISA and perimeter firewall is ISA? I can't think of any reason why this wouldn't work. I will be quite an over head in management, public addresses space etc. As long as you allow the right traffic, it doesn't matter how many firewalls you have. I don't know what your business is and what policies are but by the sounds of it you're being required to configure it in this because of some perceived security benefits. IMHO it's better to keep it simple and you might want point out to your corp team that this method might not be in line with Microsoft recommendations and that the added complexity means more chance of holes. If you want to discuss in more detail drop me an email/google IM. Cheers, Rhys Hey you can email me firstname.lastname at gmail. Actually in the email alert for the comment the spaces are correct so I can see what you mean. Are you intending to use ISA server? Ie Xnet Firewall is ISA and perimeter firewall is ISA? I can’t think of any reason why this wouldn’t work. I will be quite an over head in management, public addresses space etc. As long as you allow the right traffic, it doesn’t matter how many firewalls you have. I don’t know what your business is and what policies are but by the sounds of it you’re being required to configure it in this because of some perceived security benefits. IMHO it’s better to keep it simple and you might want point out to your corp team that this method might not be in line with Microsoft recommendations and that the added complexity means more chance of holes. If you want to discuss in more detail drop me an email/google IM. Cheers,
Rhys

]]> By: seshu kumar adiraju http://blog.rhysgoodwin.com/windows-admin/moss-split-back-to-back-in-the-real-world-part1/#comment-157 seshu kumar adiraju Fri, 24 Sep 2010 05:58:39 +0000 http://blog.rhysgoodwin.com/?p=350#comment-157 oops the spaces got deleted... is there a way to attach a schematic for what I'm thinking.. or mail? :) thanks oops the spaces got deleted… is there a way to attach a schematic for what I’m thinking.. or mail? :)

thanks

]]> By: seshu kumar adiraju http://blog.rhysgoodwin.com/windows-admin/moss-split-back-to-back-in-the-real-world-part1/#comment-156 seshu kumar adiraju Fri, 24 Sep 2010 05:56:29 +0000 http://blog.rhysgoodwin.com/?p=350#comment-156 Hi Rhys, Great article. I'm thinking of one variant. My corp team insists on more cleaner separation between paths taken by internal and external users. They want the network to be physically isolated between these modes of access. Wanted to check if this kind of split topology is possible. Not sure if I'm making sense, please advise. Corp Xnet External users | | Xnet Firewall Perimeter Firewall | | Xnet WFE (Corp DC auth) Perimeter WFE(PerimeterDC) | | --------------------------------- | Firewall | WFE(intranet), DB and App (Corp Domain) | Corp resources Hi Rhys,

Great article.
I’m thinking of one variant. My corp team insists on more cleaner separation between paths taken by internal and external users. They want the network to be physically isolated between these modes of access.

Wanted to check if this kind of split topology is possible.
Not sure if I’m making sense, please advise.

Corp Xnet External users
| |
Xnet Firewall Perimeter Firewall
| |
Xnet WFE (Corp DC auth) Perimeter WFE(PerimeterDC)
| |
———————————
|
Firewall
|
WFE(intranet), DB and App (Corp Domain)
|
Corp resources

]]> By: Rhys http://blog.rhysgoodwin.com/windows-admin/moss-split-back-to-back-in-the-real-world-part1/#comment-135 Rhys Tue, 22 Jun 2010 02:01:36 +0000 http://blog.rhysgoodwin.com/?p=350#comment-135 Hey Man, good to hear from you. Trust all is good in your new job, things hear and all good, you know how it is ;-). Yeah don't remind me about tough guy! I've not done much training! Ah well it'll be good to catch up anyway :-) Hey Man, good to hear from you. Trust all is good in your new job, things hear and all good, you know how it is ;-) . Yeah don’t remind me about tough guy! I’ve not done much training! Ah well it’ll be good to catch up anyway :-)

]]> By: Raymund http://blog.rhysgoodwin.com/windows-admin/moss-split-back-to-back-in-the-real-world-part1/#comment-134 Raymund Tue, 22 Jun 2010 01:44:00 +0000 http://blog.rhysgoodwin.com/?p=350#comment-134 Hey Dude how are you doing, hope everything is fine there in STJ? I have a question from my blog (http://anyrest.wordpress.com/2010/06/17/integrating-sharepoint-2010-and-sql-reporting-services-2008-in-6-easy-steps/) and I remember you already covered this one so I redirected to this great article of yours. Hope thats alright! Tough Guy is 2 weeks away!!! Hey Dude how are you doing, hope everything is fine there in STJ? I have a question from my blog (http://anyrest.wordpress.com/2010/06/17/integrating-sharepoint-2010-and-sql-reporting-services-2008-in-6-easy-steps/) and I remember you already covered this one so I redirected to this great article of yours. Hope thats alright! Tough Guy is 2 weeks away!!!

]]> By: Rhys http://blog.rhysgoodwin.com/windows-admin/moss-split-back-to-back-in-the-real-world-part1/#comment-112 Rhys Sun, 14 Mar 2010 00:19:19 +0000 http://blog.rhysgoodwin.com/?p=350#comment-112 Thanks for you comment Erik. Yes you're correct, only one zone is required. ISA makes the authentication seamless. It's great! Thanks for you comment Erik. Yes you’re correct, only one zone is required. ISA makes the authentication seamless. It’s great!

]]> By: Erik Erlendsson http://blog.rhysgoodwin.com/windows-admin/moss-split-back-to-back-in-the-real-world-part1/#comment-111 Erik Erlendsson Sat, 13 Mar 2010 20:35:32 +0000 http://blog.rhysgoodwin.com/?p=350#comment-111 Rhys, Great article. It seems like in this arrangement you would only need one zone (just Default, instead of Default and Extranet), since internal and external users are using the same authentication mechanism. Is that correct, or am I missing something? Rhys,

Great article. It seems like in this arrangement you would only need one zone (just Default, instead of Default and Extranet), since internal and external users are using the same authentication mechanism. Is that correct, or am I missing something?

]]>