Hi,
I have been tasked with designing an externally accessible CRM Dynamics 2013 solution and have read the various MS guides but would appreciate further advice.
I am planning to utilise a DMZ to provide an initial layer of protection. The MS guides for multi-server IFD deployment suggest hosting the ADFS Proxy and CRM FE server role in the DMZ. I don't really like this as the CRM FE server has to be AD domain joined so it doesn't seem sensible locating this in the DMZ and then opening up the insider firewall to all the necessary AD traffic.
From some googling it appears that the Web Application Proxy feature introduced with Server 2012 looks like it should meet my needs if I locate a WAP in the DMZ and move the CRM FE to the internal network.
So....
- Is using WAP as a reverse proxy to CRM Dynamics 2013 a supported configuration?
- Is WAP a direct replacement for ADFS - can I simply deploy a single WAP server in the DMZ that will act as both ADFS proxy and CRM proxy?
- What is the performance impact of using WAP in front of Dynamics? - does anyone know of any performance guidelines (I'm looking at around 150 users)
Thanks