Reverse Proxy and SSL

1983
5
10-23-2013 06:29 AM
AlbertoAloe
Occasional Contributor
Hi everybody.

I have a publicly exposed ArcGIS Server 10.2 running on a virtual machine in perimeter network (DMZ). OS is Windos server 2008 R2 with IIS 7.5 and I'm using web adaptor. IIS and ArcGIS server are set for http only.

I'd like to add a bit more of security putting SSL into place. My network guys proposed me to use a reverse proxy that is holding the signed certificate and then reroute the traffic to my webserver. The reverse proxy will handle the encripted https traffic forwarding http traffic to port 80 of my web server (flagging http header in order to inform the web werver of encryption-decryption).

Is this configuration OK? Somewhere I found an article that says that https should be implemented end to end.

Thanks

Alberto
0 Kudos
5 Replies
GregoryHollard
New Contributor II
You have to do SSL end-to-end, otherwise ArcGIS Server returns the wrong URL back to the client for operations such as "Export Map" etc.
0 Kudos
JasonPatterson
New Contributor III
0 Kudos
AdrianMarsden
Occasional Contributor III

Hi - did you ever resolve this?  I'm trying to do similar

  • AGS and WA on same server
  • Public sub domain served by MS TMG reserve proxy firewall
  • We have a CA Cert for *.ourmaindomain.tld
  • We have a need to enable htpps on sub domain

I tried adding the CA Cert to AGS following instructions, but everything broke - I think I managed to get https access to our sub domain internally (so not going via TMG reverse proxy) but my Javascript API sites broke

Cheers

ACM

0 Kudos
JohnMellor__GISP
New Contributor III

I'm trying to install ArcGIS for Server 10.4.1 - and am running into a certificate problem. I can see the manager URL from the server, but not from workstation (without going through Advanced and selecting the non recommended route).  Any suggestions?

0 Kudos
RebeccaStrauch__GISP
MVP Emeritus

Have you tried installing the web adaptor and accessing manager thru that URL?

About the ArcGIS Web Adaptor—Installation Guides (10.4.1) | ArcGIS for Server

Or just going in thru ArcCatalog?

0 Kudos