Front cover - IBM Redbooks

Figure 14-20 Not Authorized
The reverse proxy server will only allow connections to the Domino Directory
(names.nsf) and to the mail directory (/mail). The Domino Directory needs to be
accessible for user authentications. By only allowing the Reverse Proxy server
access to certain files and directories, it provides an added layer of security.
14.2.3 Firewall configuration
The WebSphere Edge Server reverse proxy server was placed in the DMZ of our
lab’s firewall. This allows connections to be made to it from the simulated
Internet, and also allows the reverse proxy server to be configured with access to
the Domino server. The Domino, QuickPlace, and Sametime servers were
placed inside the firewall. They are accessible to any user inside the network.
The firewall was configured to only allow port 80 and port 443 connections from
the Internet into the DMZ and to the reverse proxy server. The firewall rules are
shown in Figure 14-21.
The firewall was also configured to only allow connections from the reverse proxy
server into the internal network to the Domino server.
Chapter 14. Scenario implementation details 609