Installing ArcGIS 10.2 Web Adaptor with existing reverse proxy

[JoeTosoni]

Hello,

I am just curious if anyone has any helpful developments or progress to pass along in relation to installing the ArcGIS Web Adaptor for either ArcGIS 10.1 or 10.2 with an existing reverse proxy that uses Microsoft ForeFront TMG? Our ArcGIS enterprise server environment is currently on version 10.0 and leverages a reverse proxy server within the DMZ. We are planning to upgrade to 10.2 within the next few months, however, I am unsure if it would be advantageous to install the Web Adaptor on either a separate server behind the firewall or on the same server within our DMZ? Or, maybe it is not really needed given that our reverse proxy software achieves the same goal. One benefit may be that the web adaptor would allow us to control and secure our internal URL composition, which we will consider. It seems there are many other benefits as well but I still need to do more research on the TMG reverse proxy to determine if it suffices and performs in a similar manner. This is all relatively new to me given that I was GIS Analyst for many years and have recently been getting acquainted with ArcGIS for Server administrative aspects and tasks.

I have also read in a few posts that folks have had some trouble in the past with installing the 10.1 adaptor with a reverse proxy but things may have gotten better. Either way, any helpful information, tips, or articles would be much appreciated on this topic. Thanks! Joe

[BubbaHey]

If you use web adaptor, don't need reverse proxy but i realize a lot of organizations already have one in place. Main issue I've seen is URL rewrites.  Go  to IIS Manager, go to Server Farms > Reverse Proxy name - click on Routing Rules. Under Actions, click URL Rewrite. Under Requested URL, it should be Matches the Pattern. Using: Wildcards. Under pattern it should be arcgis/*

Also see:  http://support.esri.com/en/knowledgebase/techarticles/detail/40680 - applies also to 10.2

[JoeTosoni]

Great, thank you for your reply bubba - I'll take a look at the link you sent and go from there. As for the reverse proxy, our organization would prefer to keep it in place because the Microsoft ForeFront TMG software helps keep a log of individual service usage and distinct users for billing purposes. Most likely I will place the Web Adaptor behind the our firewall on a separate server first and go from there...another option I have heard is to place the web adaptor directly on the proxy server (DMZ). Keep ya posted on the progress to come...