Allowing access to outside world

[jjohnsoncantell]

Greetings,

 

Im having more and more requests these days to allow outside access to network shares and to move some of our externally hosted apps in house to save hosting costs. I have a forefront 2010 TMG firewall setup as an edge firewall so nothing is outside of the network. I've never hosted anything before and I would appreciate some suggestions on where to start and how to make it secure.

 

Thanks

James

[computer_expert]

You could use Home Access + to serve files up to remote users with a school login. HAP can do a variety of other things too so could be a good starting point for you.

 

HAP can be found here: Home Access Plus+

[Graham-Millgate]

Hi James,

 

As you are using TMG it may be worth looking at Forefront UAG, although this is soon to be killed off by Microsoft in the same way that TMG is, it’s still supported officially till the end of April 2015.

 

If you have any 2012 R2 Servers you could always look at the remote access role with the Web Application Proxy.

 

If you would like to talk to a solutions expert at Millgate please let me know.

[jjohnsoncantell]

Thanks guys. I was looking at HAP as a possibility but i'm uncertain what changes id need to make to my network in order to set it up and run it securely.

[fairm010]

We use HAP here and it it needs no other changes to the network other than a well performing IIS server and a few router / DNS changes.

[jjohnsoncantell]

i was thinking of setting up a test but im not sure what changes i need to make to my firewall, im worried about it not being secure and being compromised, any help would be appreciated,.

 

- - - Updated - - -

 

i was thinking of setting up a test but im not sure what changes i need to make to my firewall, im worried about it not being secure and being compromised, any help would be appreciated,.

[fairm010]

We forwarded traffic to / from our IIS server on port 443 to port 443 on our public IP. The DNS from our domain then points to this. Its all fully encrypted providing you have a legit SSL certificate I think.