Front-end IIS server, forward requests to Back-end IIS

[ryan_powell]

Hi, simple question that no doubt has a complicated answer.

Is there a way to set IIS to forward certain websites / virtual directories to another IIS server that isn't directly visible to the internet. Similar to NAT I suppose. The plan is to make out Windows Software Update Server available to manage at home via a virtual directory hosted on our webserver.

I've tried creating a virtual directory and setting it's home directory to the remote computer but when I try and access it from home it repeatedly asks for authentication which it doesn't accept.

Hope this makes sense. Thanks

[Geoff]

You're describing a reverse proxy.

I'm not sure if IIS can actually do this. I do know that ISA can, also squid and apache can. Take your pick.

[ITWombat]

Woudn't it be easier and more secure to use RDP via VPN. You'd also get more information if you can have a "visual" of the whole server rather than just the WSUS management browser interface.

[tarquel]

I think he's intending it to be used with the pupils / staff - not just him - ITWombat.

I wouldn't give the pupils or staff a VPN link, tho i guess a form of TS would work perhaps using RDP and a TS server - or something like that lol

Nath.

[Lord_Edam]

I think WSUS's admin pages only work with integrated authentication, which would be broken by any form of proxy.

you could try changing it to Basic authentication if you're using SSL, which might work.

[Geoff]

IAS supports intergrated auth IIRC.