Skip to main content
Solved

Employee portal on another server


Forum|alt.badge.img+8

 

Hi, we want to allow access to the Employee Portal outside of our internal network. is it possible to install the employee portal on a different server to avoid exposing the application server to the world?

Best answer by Sajith D

Hi @DominikaM ,

Using a separate App server instance will not be possible. However, you can minimize the exposure of the application endpoints by using a reverse proxy so that all requests can be terminated at the proxy and shielding the app server from public access. You can restrict the endpoints so other than the required endpoints, nothing else is exposed. This together with using Azure AD/ADFS authentication rather than default DB authentication will give you the additional option of using MFA when accessed from public networks. 

have a look at https://docs.ifs.com/techdocs/Foundation1/010_overview/210_security/090_exposing_to_internet/default.htm

 

Cheers.

View original
Did this topic help you find an answer to your question?
This topic has been closed for replies.

2 replies

Forum|alt.badge.img+21
  • Superhero (Employee)
  • 427 replies
  • Answer
  • December 7, 2021

Hi @DominikaM ,

Using a separate App server instance will not be possible. However, you can minimize the exposure of the application endpoints by using a reverse proxy so that all requests can be terminated at the proxy and shielding the app server from public access. You can restrict the endpoints so other than the required endpoints, nothing else is exposed. This together with using Azure AD/ADFS authentication rather than default DB authentication will give you the additional option of using MFA when accessed from public networks. 

have a look at https://docs.ifs.com/techdocs/Foundation1/010_overview/210_security/090_exposing_to_internet/default.htm

 

Cheers.


Forum|alt.badge.img+8
  • Author
  • 26 replies
  • December 7, 2021

Thank you. 


Cookie policy

We use cookies to enhance and personalize your experience. If you accept you agree to our full cookie policy. Learn more about our cookies.

 
Cookie settings