Sharing Geoprocessing Services and Map Services?

[TimHayes3]

Currently, I am sharing multiple geoprocessing services and map services where I need to issue a Token and then re-issue the Token every year. I want to avoid having to use a Token. I want to confirm with the folks here that one option that does not require a token is to do the following:

Install a stand-alone ArcGIS Server with IIS and a Web Adaptor that exposes the ArcGIS REST Services Directory to the outside (outside our Firewall). 

I then publish any services I want outsiders to use on this server.

Is this the best approach?

[JakeSkinner]

Hi @TimHayes3, are you currently leveraging Enterprise where you have Portal, ArcGIS Server, Data Store, and Web Adaptors?  If so, you won't need to stand up another ArcGIS Server instance.  You could simply stand up a web server that is externally accessible (i.e. in a DMZ).  Install the Web Adaptor on this new web server and configure with your federated ArcGIS Server instance (you can have multiple web adaptors configured with a single instance of ArcGIS Server).  

Any service you want externally accessible, you just need to share this with Everyone within Portal.  Now the service can be accessed with the external web adaptor with no authentication required.

[TimHayes3]

Could I install a standalone ArcGIS Server 11.3 with web adaptor outside our DMZ, and provide everyone access to the geoprocessing service this way? what are the risks associated with this approach? nothing would be on this machine except the geoprocessing service and maybe other map services I want to share with the public via REST services.

[JakeSkinner]

Yes, that would work.  The only downside I see having both web adaptor in ArcGIS Server installed outside your firewall is having an extra ArcGIS Server instance to maintain (i.e. upgrades, patches).  

[TimHayes3]

If I want to create a geoprocessing service and simply share the REST url, do I need to install the web adaptor? or can I do this without the web adaptor? This would be a standalone AGIS to be used only for sharing geoprocessing services. It would not be tied to a website. 

[JakeSkinner]

You could do this without the web adaptor, but you would need to open port 6443 on the server.  The URL would be accessible through https://server.domain.com:6443/arcgis/rest/services.