Internal web adaptor with Windows authentication and one without in DMZ pointing to one Portal ?

[MarcBate]

We are having problems getting two web adaptors working with our Enterprise Portal and want to confirm if what we want to do is even possible. One web adaptor inside the firewall is set to use Windows authentication and we have the portal identity store configured to automatically create accounts using your Windows login. It works. The problem is when we wanted to put another web adaptor in our DMZ to allow external users such as those using Field Maps. We are using the same URL for both of these web adaptors which resolves correctly depending if you are inside the firewall that has a different DNS server.

When accessing the DMZ web adaptor, there are 403 errors where dojo.js cannot GET other resource files and the web page is blank. When trying to open the resources that had the 403 error, they come up in the browser.

Any ideas on how to get this working or if this is even possible?

[MarcBate]

Any chance this is related to compression? I assume since I have Esri web adaptors on the DMZ and internal IIS that it would handle such things, but I'm wondering if I need to make some changes in IIS

[MarcBate]

Here is the list of requests from the viewer.html. When clicking on any of the 403 resources, they appear a new browser tab so they can be accessed. I'm not sure what headers can be added and to which IIS (DMZ or internal).. 

[MarcBate]

We decided to start fresh with the 9.1 release, and it works. We have anonymous IIS access on the DMZ web adaptor and windows authentication with automatic account creation on the internal web adaptor. I'm leaning towards naming and DNS issues being to blame, or having different IIS on the DMZ and internal web adaptor servers initially when we tried with 9.0