SharePoint Best Practices Conference Notes (London 2009) – Day 3
Intranet, Extranet and Internet best practices. (Steve Smith, Spence Harbar)
- If you need an extranet, VPN could be an option.
- If you have 2 Web Front End servers, one for Intranet and one for Internet, keep both web applications on both servers, it’s easier to update.
- Web Application Best Practices:
- Don’t allow servers to access the internet.
- 64 bit hardware.
- Use Network Intrusion Detection (Host based detection causes extra server load).
- Consider Transport Layer Security(SSL, IPSEC) between servers carefully, it’s complex.
- SSL Best Practices:
- Offload from SharePoint.
- Sticky session on NLB (see white-paper on combined knowledge site).
- Use port 443.
- Use A Records in DNS.
- Use fixed IP Addresses.
- Use SSL for Central Administration (password sent over the network).
- ForeFront Anti-Virus for SharePoint.
Read the rest of this entry »
If you like this post then please consider subscribing to my full feed RSS. You can also subscribe by Email and have new posts sent directly to your inbox.
I’ve updated my 

