One-way-synchronisation using Distributed Collaboration?

[MichaelNüßlein]

We'd like to put a master-Portal in the intranet and a slave-Portal in the DMZ.

Is it possible to synchronise the slave using Data-Collaboration, only opening Ports from Intranet to DMZ?

There should be no datastream-initiation from DMZ to intranet.

Klaus

[CraigRussell]

Hi Klaus

In this instance your DMZ Portal will be the host and your Intranet Portal would be the guest.  The guest initiates all communication (outbound over port 443) whether it is two way (push/pull) or one way (push only).

Craig

[MichaelNüßlein]

Hi Craig

thank you for your answer.

So this means:

We can run a high-available Portal (two Portals with loadbalancer) as host which will receive updates from high-available Portal (two Portals with loadbalancer) as guest?

Klaus

[MichaelNüßlein]

The communication is bidirectional:

when uploading the invite-file and also when uploading the response-file, in both cases, the https-certificate of the other server is checked.
Or can i tweak this, that it will not be checked?

[CraigRussell]

Establishing trust is not the same as bidirectional communication.  The invitation cannot be accepted if the SSL certificate of the host isn't trusted; if you're getting an error then you'll have to import the root/intermediate certificates into your Portal - Configuring the portal to trust certificates from your certifying authority—Portal for ArcGIS | Docu...