Mastering Active Directory

Single federation server and single Web Application Proxy server

This will be ideal setup to start with. This removes the security concern we had with the single federation server. The Web Application Proxy server will be the initial contact from the external network and it will relay requests in and out from the internal AD FS server. This is still not going to provide high availability as each role holder only runs one server:

In this setup, we can separate the network functionality into perimeter and corporate networks. In the firewall, there will be following NAT and access rules:

• Map external IP address to myapp.rebeladmin.com so users ...