Dynamics Community Forum Thread Details

Using CRM mobile apps without exposing CRM web servers to internet

We have a customer who is sensitive about placing on-premise CRM server in DMZ zone/exposing to customer. It is my understanding that without IFD deployment, CRM mobile apps could not be used. With this constraint, one of the floated idea is to:

1. Configure IFD but don't put CRM servers on DMZ

2. Instead prepare a new proxy server and place that in DMZ

3. Only proxy servers gets exposed to internet. Any https request gets routed through proxy to internal CRM web server for back & forth communication.

Has anybody tried this? Or are there any ideas to make CRM mobile app work without exposing servers to internet.

For people to get access from the internet, you need to expose something to the internet. The only alternative I can think of is setting up VPNs for all the mobile devices and using something like Good instead of the default Dynamics mobile app.

That said, if you're setting up ADFS, you can still scope things to be more secure. Make sure that in the DMZ you configure an ADFS Proxy server. In the CRM install, make sure that only a front-end server is set up in the DMZ. Install the SQL and back-end roles on internal servers, then only open the access you need to connect the CRM front-end to the back-end servers through the DMZ. The combination of ADFS and having no data stored in the DMZ itself is very reasonably secure.

Quick Links

Leaderboard