Sharepointology

SharePoint Best Practices Conference Notes (London 2009) – Day 3

Intranet, Extranet and Internet best practices. (Steve Smith, Spence Harbar)

• If you need an extranet, VPN could be an option.
• If you have 2 Web Front End servers, one for Intranet and one for Internet, keep both web applications on both servers, it’s easier to update.
• Web Application Best Practices:
  • Don’t allow servers to access the internet.
  • 64 bit hardware.
  • Use Network Intrusion Detection (Host based detection causes extra server load).
  • Consider Transport Layer Security(SSL, IPSEC) between servers carefully, it’s complex.
• SSL Best Practices:
  • Offload from SharePoint.
  • Sticky session on NLB (see white-paper on combined knowledge site).
  • Use port 443.
  • Use A Records in DNS.
  • Use fixed IP Addresses.
  • Use SSL for Central Administration (password sent over the network).
  • ForeFront Anti-Virus for SharePoint.

Read the rest of this entry »