MP and FSP
-
Tuesday, February 05, 2008 1:54 AM
Hi,
I understand FSP is used for troubleshooting and most of the case is the client cannot find the MP. Thus it is not suggested to install on the same box. However, I want to use FSP to keep track the deployment status.
Can MP and FSP be installed on the same server?
boteasy.
All Replies
-
Tuesday, February 05, 2008 2:37 AM
There’s nothing to stop you installing the MP and FSP on the same computer, but it’s not recommended because you have a single point of failure (as you pointed out). More importantly, it’s not a good idea from a security point of view because the FSP accepts any and every HTTP connection, which makes this computer an easy target on a production network and you could soon have a non-functioning site. From Best Practices for Securing Site Systems (http://technet.microsoft.com/en-us/library/bb694127.aspx):
The fallback status point role should never be assigned to any other Configuration Manager 2007 site system role because it accepts unauthenticated data from clients, even in native mode.
But if you really want to do it, despite the risks, there's nothing in the product that stops you from doing this.
- Carol
This posting is provided “AS IS” with no warranties and confers no rights.
-
Tuesday, February 05, 2008 4:34 PMOwner
And not only do we not stop you from co-locating the two roles, we do support them on the same box. But as Carol points out, it is recommended that the FSP is on its own system. Plus, one of the goals fo the FSP is to have a location for clients to say "Hey, I can't find my MP". Of course, if it is a hardware issue, and they are on the same box, then there's no FSP to send the help request to :-)

