Quantcast
Channel: Security
Viewing all articles
Browse latest Browse all 1881

IWA over IIS AAR using a domain alias?

$
0
0

Hello all, 

First post here.  I'm a software dev, so advanced IIS configuration is a bit outside my wheelhouse.  I'm not entirely sure how to word my question, but basically, it's:  "can you configure IIS as a reverse proxy that supports IWA, with the external domain name being different from the internal AD name?" 

More details:

I have a client who's internal AD domain name is different than their external domain, but they wish to support IWA for their enterprise users when accessing externally.  

For example, the internal AD domain name is "asdf.com", so their AD credentials are all ASDF\jdoe orjdoe@asdf.com.  Externally, they use the domain "asdfpub.com", and plan to configure a reverse proxy to route external http traffic to hosts available internally on the asdf.com domain, which are secured using IWA.   

So, does anyone know if it is possible to configure IWA in such a scenario, so traffic coming in from "asdfpub.com" is challenged to provide AD credentials for the "asdf.com" domain?  

Hope I've worded this correctly.  Thanks for any info you can provide!

Jon


Viewing all articles
Browse latest Browse all 1881

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>