SalesLogix Web security with DMZ

[TitansNFL]

Large organization requires the secure certificate be installed on the DMZ server. We need a procedure to route from the DMZ into/outof the internal network. What is the best way to do this? If SLX Web is installed in the DMZ they greatly limit access for tech support etc. They will not allow an edge server They are requesting a solution from Sage that will redirect data between the DMZ and the internal SLX Server. Does anyone have a solution for this? Also could use a white paper on how to secure the Web install in different situations including a secure DMZ structure many large organizations have. It would greatly help sell the secruity departments on SLX. Is there such a thing?

[RJLedger]

AFAIK there is no good/great answer for this...  Most of our customers do not use a DMZ approach w/SalesLogix because of this issue.

[TitansNFL]

Someone must have resolved this. If we put the SLX server in the DMZ we can not use active directory to authenticate the user login which is a requirement. Are we admitting SLX will not work in an Enterprise environment? Without a solution only the internal network has access to SLX eliminating a main reason for having the Web client and desire to use smart phones and tablet/ipads.

[RJLedger]

Agree.. it is a problem...

Here is a links to something I found on the net:

    http://blogs.technet.com/b/seanearp/archive/2009/04/28/active-directory-in-the-dmz.aspx

and a discussion here: http://serverfault.com/questions/13014/active-directory-in-a-dmz

[TitansNFL]

Thanks for the links