locked
Is the self-service portal link accessible over the internet instead of connecting to the corporate intranet over VPN? RRS feed

  • Question

  • Hi,

    We are using SCSM 2012.As per client requirement,we want customers to access the Self service portal through Internet.

    Is it possible?Any pointers will be helpful.

    Thanks

    Friday, October 26, 2012 10:05 AM

Answers

  • It might be a good idea to install a second SharePoint in the DMZ. This way you can limit the connections from clients in internet to the internal SharePoint. Using a SharePoint Server in the DMZ offers a better control of connections/traffic to the internal network ressources (AD, SCSM).  

    Andreas Baumgarten | H&D International Group

    Friday, October 26, 2012 12:10 PM
  • 100% to Andreas.

    However, if they are looking for a quick and "dirty" (and not nearly as secure) as above. You can NAT out your SharePoint IP and then connect via IP or even update external DNS. (not the best way, best way is as per Andreas).

    my 2 cents,

    F.


    As long as you learn something new every day, the day is not wasted.

    Monday, October 29, 2012 7:40 AM

All replies

  • Where is the SharePoint server of the SCSM SSP located (local network or in a DMZ)?

    All customers have a AD account for authorization against the SSP?


    Andreas Baumgarten | H&D International Group

    Friday, October 26, 2012 10:29 AM
  • Share point server is located in local network only.

    Yes,al customers have a AD account for authorization against SSP.

    Thanks

    Friday, October 26, 2012 10:38 AM
  • It might be a good idea to install a second SharePoint in the DMZ. This way you can limit the connections from clients in internet to the internal SharePoint. Using a SharePoint Server in the DMZ offers a better control of connections/traffic to the internal network ressources (AD, SCSM).  

    Andreas Baumgarten | H&D International Group

    Friday, October 26, 2012 12:10 PM
  • 100% to Andreas.

    However, if they are looking for a quick and "dirty" (and not nearly as secure) as above. You can NAT out your SharePoint IP and then connect via IP or even update external DNS. (not the best way, best way is as per Andreas).

    my 2 cents,

    F.


    As long as you learn something new every day, the day is not wasted.

    Monday, October 29, 2012 7:40 AM
  • Don't forget that you need to be able to connect to both the Sharepoint site (the web part) and also the web content server. A trusted SSL cert will be required for both of these sites. The web content will not load into the webpart unless that connection is made to a trusted cert.
    Wednesday, October 31, 2012 2:30 PM