Community
Select to view content in your preferred language

Location of Flex Applicaiton Folders using web adaptor in DMZ

2963
1
05-15-2013 06:40 AM
by Anonymous User
Not applicable
‎05-15-2013 06:40 AM
Original User: Richmondgis

I hope I am not reposting a question that has already been discusses, but I did not see it�?�

We have just successfully configured the Web Adaptor located on a Windows 2008 Server in a DMZ back to a ArcServer 10.1 inside the network.  The forward facing web server also currently works as a reverse proxy to the existing ArcServer 10.0 instance.  (Btw..We found that having both servers using binding to port 80 only works if the default name of the Web Adaptor is not the same as the existing service).

We use the Flex Viewer application to serve out the map services via the internet. Currently (using version 10.0) the Flex Viewer folders are placed in a virtual directory on the ArcServer 10.0machine inside the network..This works well as the forward facing web server is the reverse proxy to the application.

With the Web Adaptor (Version 10.1 SP1) loaded on the forward facing web server, it seems possible that the flex application can reside on the server in the DMZ  or the internal GIS Server. 

Is there any advantage gained or lost by the flex viewer application older residing on the internal GIS server, or the Web Server in the DMZ?
Preview file
8 KB
Preview file
50 KB
0 Kudos
1 Reply
by Anonymous User
Not applicable
‎05-17-2013 04:50 AM
Original User: Richmondgis

I maybe able to answer my own question.  After seting up the webadaptor, I had a "duh huh" moment.
The flex package can actually be on any machine with IIS running.  Whether that machine is on my network, in the DMZ, or
on another network altogether.   After looking to place the flex package on the ArcGIS server, I found that those IIS
componets, while running, were not turned on or other wise available.  The IIS manager was not accessable. These componets
could be turned on, but then that may "open a door" that should stay closed for security purposes.

So at this time, we have decided to put the Flex package on the forward facing web server in the DMZ.  A virtual directory within
IIS is created and the flex package is sent to the physical folder via ftp. (since the server is in the DMZ).  At this time there is a
permissions issues that needs to be resolved by IT, but I feel this is the best way to go to provide public access to the
Flex viewer pacakge.

If there are other opinions on this issue, please provide them. 

James
0 Kudos