Answered by:
Using SFB Server from the internet

Question
-
Hi,
I setup SFB Server on the network and my users are using it. I want that users in the outside of the network(Internet) could use Skype. How can I do that?
Thanks
Tuesday, January 29, 2019 8:44 AM
Answers
-
Hi Eminent20201
You will need to deploy an EDGE server and Reverse Proxy
https://docs.microsoft.com/en-us/skypeforbusiness/plan-your-deployment/edge-server-deployments/edge-server-deployments?toc=/SkypeForBusiness/toc.json&bc=/SkypeForBusiness/breadcrumb/toc.json
There's plenty of links out there to set up both. You will of course need some spare public IP's, public DNS records, new public certificates and some knowledge of networking to set it up correctly.
You can use an existing reverse proxy if you have one currently or a simple Windows server using IIS AAR
https://ucsorted.com/2015/11/16/how-to-configure-iis-arr-for-skype-for-business/
Using a Windows Server is my least preferred. If you able to use a Kemp\F5, this would be better.
Regards
- Edited by K_S_C Tuesday, January 29, 2019 9:15 AM
- Proposed as answer by Calvin-Liu Wednesday, January 30, 2019 6:44 AM
- Marked as answer by Amirhossein Karimpour Wednesday, January 30, 2019 7:17 AM
Tuesday, January 29, 2019 9:12 AM
All replies
-
Hi Eminent20201
You will need to deploy an EDGE server and Reverse Proxy
https://docs.microsoft.com/en-us/skypeforbusiness/plan-your-deployment/edge-server-deployments/edge-server-deployments?toc=/SkypeForBusiness/toc.json&bc=/SkypeForBusiness/breadcrumb/toc.json
There's plenty of links out there to set up both. You will of course need some spare public IP's, public DNS records, new public certificates and some knowledge of networking to set it up correctly.
You can use an existing reverse proxy if you have one currently or a simple Windows server using IIS AAR
https://ucsorted.com/2015/11/16/how-to-configure-iis-arr-for-skype-for-business/
Using a Windows Server is my least preferred. If you able to use a Kemp\F5, this would be better.
Regards
- Edited by K_S_C Tuesday, January 29, 2019 9:15 AM
- Proposed as answer by Calvin-Liu Wednesday, January 30, 2019 6:44 AM
- Marked as answer by Amirhossein Karimpour Wednesday, January 30, 2019 7:17 AM
Tuesday, January 29, 2019 9:12 AM -
Hi!
You will need to deploy an Edge Server with public certificate:
http://blog.schertz.name/2016/03/skype-for-business-2015-edge-server-deployment/
And also, deploy a Reverse proxy, that could be a Web Application Proxy from Microsoft
https://blogs.technet.microsoft.com/dodeitte/2013/10/29/how-to-publish-lync-server-2013-web-services-with-windows-server-2012-r2-web-application-proxy/
https://www.admin-enclave.com/en/articles/skypeforbusiness/224-use-ms-web-application-proxy-as-reverse-proxy-and-adfs-with-skype-for-business.html
The certificate in Edge Server could not be a wildcard if you plan use federation, but you can use for front end services like meet, webservices....
“Vote As Helpful” and/or “Mark As Answered” - MCSA - MCSE - http://www.ucsteps.com/
- Proposed as answer by Calvin-Liu Wednesday, January 30, 2019 6:44 AM
Tuesday, January 29, 2019 11:55 AM -
Hi,
Agree with the above two repliers.
To let users use SFB with external network, you will need to deploy Edge server for your organization.
Edge is to handle the External Desktop Skype for Business client requests and External Media Traffic, it provides three external Edge services which are Access Edge service, Web conferencing service and A/V call service.
Here you will find more details on Edge server:
https://docs.microsoft.com/en-us/skypeforbusiness/deploy/deploy-edge-server/deploy-edge-server
Kind regards,
Calvin Liu
Please remember to mark the reply as an answer if you find it is helpful. It will assist others who has similar issue. If you have feedback for TechNet Subscriber Support, contact tnsf@microsoft.com.
Click here to learn more. Visit the dedicated forum to share, explore and talk to experts about Microsoft Teams.
- Proposed as answer by Calvin-Liu Wednesday, January 30, 2019 6:44 AM
Wednesday, January 30, 2019 6:43 AM