locked
Is reverse proxy imp RRS feed

  • Question

  • Hello

    I have to set up SFB for a small office about 25 people

    I have got internal DC,SFB FE, Edge 

    do i need reverse proxy as well..I mean is it really important to set up reverse proxy?

    Can I just test my connection ad use it as it it is for now and add reverse proxy later on...or does it not work without reverse proxy?

    Wednesday, November 23, 2016 9:40 AM

All replies

  • Hi Lexi,

    Yes a reverse proxy server is required, the reverse proxy allows the web services of the Front End server to be published without exposing the Front end server directly to the internet. If also directs traffic inbound on port 443 to the Front end server on port 4443 so it hits the external web site of the Front end server. You also have a public certificate on the reverse proxy as well.

    A Microsoft qualified and supported reverse proxy list is 

    https://technet.microsoft.com/en-us/office/dn947483.aspx

    There are other solutions available but these are not qualified and would not be supported by Microsoft if theres was any issues. You can uses a windows server with IIS ARR for example.

    Hope this helps.

    Martin


    Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question please click "Mark As Answer". Thank you. This forum post is based upon my personal experience and does not reflect the opinion or view of my employer.

    Wednesday, November 23, 2016 9:47 AM
  • Deleted
    Wednesday, November 23, 2016 10:05 AM
  • do you have external users in this case or Lync mobile users ? if no it is not really needed

    if yes a reverse proxy is required  actually reverse proxy is needed for below scenarios:

    *download meeting content, expanding distribution groups, downloading files from Address Book Service, and PowerPoint presentations rendered by Office Web Apps servers) requires users to be able to access these services using the external FQDN configured for these services

    *also mobile device will use SIP encapsulated within HTTPS for signalling and https traffic will flow through the reverse proxy

    Wednesday, November 23, 2016 12:08 PM
  • Also sharing an old forum reference regarding  the same 

    https://social.technet.microsoft.com/Forums/office/en-US/a58eb501-ca01-42e9-9603-b558097d4967/reverse-proxy-requirement-with-lync-2013?forum=lyncconferencing


    Linus || Please mark posts as answers/helpful if it answers your question.

    Wednesday, November 23, 2016 1:20 PM