topic Reverse Proxy and SSL in ArcGIS Enterprise Questions https://community.esri.com/t5/arcgis-enterprise-questions/reverse-proxy-and-ssl/m-p/655512#M25035 <HTML><HEAD></HEAD><BODY><SPAN>Hi everybody.</SPAN><BR /><BR /><SPAN>I have a publicly exposed ArcGIS Server 10.2 running on a virtual machine in perimeter network (DMZ). OS is Windos server 2008 R2 with IIS 7.5 and I'm using web adaptor. IIS and ArcGIS server are set for http only.</SPAN><BR /><BR /><SPAN>I'd like to add a bit more of security putting SSL into place. My network guys proposed me to use a reverse proxy that is holding the signed certificate and then reroute the traffic to my webserver. The reverse proxy will handle the encripted https traffic forwarding http traffic to port 80 of my web server (flagging http header in order to inform the web werver of encryption-decryption). </SPAN><BR /><BR /><SPAN>Is this configuration OK? Somewhere I found an article that says that https should be implemented end to end.</SPAN><BR /><BR /><SPAN>Thanks</SPAN><BR /><BR /><SPAN>Alberto</SPAN></BODY></HTML> Wed, 23 Oct 2013 13:29:44 GMT AlbertoAloe 2013-10-23T13:29:44Z Reverse Proxy and SSL https://community.esri.com/t5/arcgis-enterprise-questions/reverse-proxy-and-ssl/m-p/655512#M25035 <HTML><HEAD></HEAD><BODY><SPAN>Hi everybody.</SPAN><BR /><BR /><SPAN>I have a publicly exposed ArcGIS Server 10.2 running on a virtual machine in perimeter network (DMZ). OS is Windos server 2008 R2 with IIS 7.5 and I'm using web adaptor. IIS and ArcGIS server are set for http only.</SPAN><BR /><BR /><SPAN>I'd like to add a bit more of security putting SSL into place. My network guys proposed me to use a reverse proxy that is holding the signed certificate and then reroute the traffic to my webserver. The reverse proxy will handle the encripted https traffic forwarding http traffic to port 80 of my web server (flagging http header in order to inform the web werver of encryption-decryption). </SPAN><BR /><BR /><SPAN>Is this configuration OK? Somewhere I found an article that says that https should be implemented end to end.</SPAN><BR /><BR /><SPAN>Thanks</SPAN><BR /><BR /><SPAN>Alberto</SPAN></BODY></HTML> Wed, 23 Oct 2013 13:29:44 GMT https://community.esri.com/t5/arcgis-enterprise-questions/reverse-proxy-and-ssl/m-p/655512#M25035 AlbertoAloe 2013-10-23T13:29:44Z Re: Reverse Proxy and SSL https://community.esri.com/t5/arcgis-enterprise-questions/reverse-proxy-and-ssl/m-p/655513#M25036 <HTML><HEAD></HEAD><BODY><SPAN>You have to do SSL end-to-end, otherwise ArcGIS Server returns the wrong URL back to the client for operations such as "Export Map" etc.</SPAN></BODY></HTML> Thu, 14 Nov 2013 00:50:19 GMT https://community.esri.com/t5/arcgis-enterprise-questions/reverse-proxy-and-ssl/m-p/655513#M25036 GregoryHollard 2013-11-14T00:50:19Z Re: Reverse Proxy and SSL https://community.esri.com/t5/arcgis-enterprise-questions/reverse-proxy-and-ssl/m-p/655514#M25037 <HTML><HEAD></HEAD><BODY><SPAN>This may be helpful:</SPAN><BR /><A href="http://support.esri.com/en/knowledgebase/techarticles/detail/40694">http://support.esri.com/en/knowledgebase/techarticles/detail/40694</A></BODY></HTML> Mon, 25 Nov 2013 17:25:55 GMT https://community.esri.com/t5/arcgis-enterprise-questions/reverse-proxy-and-ssl/m-p/655514#M25037 JasonPatterson 2013-11-25T17:25:55Z Re: Reverse Proxy and SSL https://community.esri.com/t5/arcgis-enterprise-questions/reverse-proxy-and-ssl/m-p/655515#M25038 <HTML><HEAD></HEAD><BODY><P>Hi - did you ever resolve this?&nbsp; I'm trying to do similar</P><P></P><UL><LI>AGS and WA on same server</LI><LI>Public sub domain served by MS TMG reserve proxy firewall</LI><LI>We have a CA Cert for *.ourmaindomain.tld</LI><LI>We have a need to enable htpps on sub domain </LI></UL><P></P><P>I tried adding the CA Cert to AGS following instructions, but everything broke - I think I managed to get https access to our sub domain internally (so not going via TMG reverse proxy) but my Javascript API sites broke</P><P></P><P>Cheers</P><P>ACM</P></BODY></HTML> Wed, 13 Jul 2016 14:37:11 GMT https://community.esri.com/t5/arcgis-enterprise-questions/reverse-proxy-and-ssl/m-p/655515#M25038 AdrianMarsden 2016-07-13T14:37:11Z Re: Reverse Proxy and SSL https://community.esri.com/t5/arcgis-enterprise-questions/reverse-proxy-and-ssl/m-p/655516#M25039 <HTML><HEAD></HEAD><BODY><P>I'm trying to install ArcGIS for Server 10.4.1 - and am running into a certificate problem. I can see the manager URL from the server, but not from workstation (without going through Advanced and selecting the non recommended route).&nbsp; Any suggestions? </P></BODY></HTML> Mon, 01 Aug 2016 17:19:46 GMT https://community.esri.com/t5/arcgis-enterprise-questions/reverse-proxy-and-ssl/m-p/655516#M25039 JohnMellor__GISP 2016-08-01T17:19:46Z Re: Reverse Proxy and SSL https://community.esri.com/t5/arcgis-enterprise-questions/reverse-proxy-and-ssl/m-p/655517#M25040 <HTML><HEAD></HEAD><BODY><P>Have you tried installing the web adaptor and accessing manager thru that URL?</P><P><A href="http://server.arcgis.com/en/server/latest/install/windows/about-the-arcgis-web-adaptor.htm" title="http://server.arcgis.com/en/server/latest/install/windows/about-the-arcgis-web-adaptor.htm">About the ArcGIS Web Adaptor—Installation Guides (10.4.1) | ArcGIS for Server</A> </P><P></P><P>Or just going in thru ArcCatalog?</P></BODY></HTML> Mon, 01 Aug 2016 18:03:41 GMT https://community.esri.com/t5/arcgis-enterprise-questions/reverse-proxy-and-ssl/m-p/655517#M25040 RebeccaStrauch__GISP 2016-08-01T18:03:41Z