topic HTTP AND HTTPS Services from single Arcgis site in ArcGIS Enterprise Questions

HTTP AND HTTPS Services from single Arcgis site

shafitrumboo — Sun, 01 Mar 2015 09:32:26 GMT

We have two ArcGIS server licenses and two SQL with hardware network load balancer (F5) with windows OS
We have kept our servers (GIS related only for hosting GIS services and GIS applications) in data center that is outside to our office premises and we have dedicated 10 GBPS fiber optic cable between our office and data center. Our organization will access the application and access the data using ArcMap/Arc Catalog using this data link and if the fiber optics breaks down then our organisation will access applications using internet.
We Have two applications one is open for public and other is with restricted access for internal users of our organization and there are chances we will make some functionalities of this application accessible to other stake holders who are stationed outside to our office premises and not part of our organization.
We are likely to make smart phone application ( Secure application and open for public applications) based on Android and IOS
We have a Virtual environment and can create multiple servers.

Questions

What will be idle ArcGIS server deployment option in both situation where:
- We have access to AD/LDAP of organisation
- We don't have access to AD/LDAP of organisation
Is this best practice to go for HTTP map services for public website and HTTPS for other secured application.? Can we have both HTTP and HTTPS from single ArcGIS server site.
Which type of authentication (GIS tier or web authentication) should we prefer.
What is the advantage of using ArcGIS Portal like Federating an ArcGIS Server site with your portal.

Re: HTTP AND HTTPS Services from single Arcgis site

JasonTipton — Mon, 02 Mar 2015 14:58:29 GMT

# 2 You can serve both HTTP and HTTPS from the same ArcServer instance, but you could also serve your public content over https as well.

Re: HTTP AND HTTPS Services from single Arcgis site

shafitrumboo — Wed, 04 Mar 2015 05:50:21 GMT

Where we have to install SSL certificate at web adaptor or NLB and do we need to install or configure anything at arcgis server site

Re: HTTP AND HTTPS Services from single Arcgis site

JasonTipton — Wed, 04 Mar 2015 14:56:11 GMT

You will have to install the external cert at your reverse proxy (or whatever is your outermost point). If your NLB is just passing on traffic and not reading the content, I'm not sure whether an internal cert is required, but your IIS Web Adaptor and ArcServer boxes need internal or self-signed certs to be installed.

Make sure you pass this test SSL Checker - SSL Certificate Verify