DMZ

This is a very rough and ready script to install Microsoft SCCM 2012 R2 and SCOM 2012 R2 on a non-domain joined Windows Server 2012 R2 (e.g. DMZ). The script is provided “As is” so please test it thoroughly on your environment. You will need to modify the script to suit your environment, you will notice there are no variables configured etc. On this environment SCOM and SCCM were both configured to use certificates (HTTPS), this script will generate the CSR and uses the same Certificate for SCOM and SCCM. They both require a Client and Server Authentication Certificate where the Subject Name matches the FQDN of the server. You need to configure your server name and DNS suffix before running this script. ...

I was recently working for a customer where their security policy prohibited traffic from the internet terminating on servers within the LAN. Skype for Business (Including previous versions Lync and OCS) uses a Reverse Proxy to terminate web requests within the DMZ and re-write the requests to the Front End Pool(s) within the LAN. The request is received on TCP/443 (HTTPS) and sent to the Front End VIP on TCP/4443. In the case of Standard Edition servers the request would be direct rather than to the Hardware Load Balancer. See diagram below: ...