ISA服务器和FS代理？或者只是一个或另一个？ [英] ISA Server AND a FS-Proxy ? Or just one or the other?
问题描述
需要现实检查....
Need a reality check here....
最佳设置是在联合服务器前面有一个ISA服务器
代理？ （当然，ISA Server和FS-Proxy都在外围网络中）
Is the optimal set up having an ISA server in Front of the Federation Server Proxy ? (Both the ISA Server and the FS-Proxy would be in the perimeter network, of course)
如果我只有ISA服务器，我会放弃任何东西。 （我想是这样的）
Am I giving up anything if I just have an ISA server. (I think so)
如果我在FS-Proxy前面没有ISA Server，而是让我的F5负载平衡器在我的两个FS之间保持平衡，那么我是否放弃任何材料 - 代理（冗余）。
Am I giving up anything material if I don't have the ISA Server in front of FS-Proxy and instead have my F5 load balancers balance between my two FS-Proxies (redundant).
欣赏现实检查......我现在在部署中进行设计，阅读完各种文档后我有点昏昏沉沉。
Appreciate the reality check... I am doing the design now on my deployment and I am a bit groggy after reading all the various documentations.
BTW ......我的初始用例是 中的帐户提供商（声明合作伙伴/ IdP）联合网络SSO。 在未来的某个时刻（在另一个项目中），我将提高自己成为依赖伙伴的能力。）
使用ADFS 2.0
BTW... my initial use case is being the Account Provider (Claims partner/IdP) in a Federated Web SSO. At some point in the future (in a different project) I will spin up the ability to be be a relying partner myself.) Using ADFS 2.0
谢谢！
推荐答案
我不确定我是否理解你的问题。
I'm not sure if I understand your question correctly.
您可以设置ISA来创建DMZ，在DMZ中放置您的FS-Proxy。
You can setup the ISA to create a DMZ, in that DMZ you place your FS-Proxy.
您的AD FS位于受信任的网络中。请确保为代理打开一些规则，让它成为Windows域的一部分。
You AD FS is in the trusted network. Please make sure you open up some rules for the proxy to let it be part of your Windows Domain.
这篇关于ISA服务器和FS代理？或者只是一个或另一个？的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！
