asked on

Remote Web Workplace does not work outside the LAN

I am trying to access Remote Web Workplace from outside my company's network, and cannot do it properly. If I enter https://[myrouter'spublicIP]/Remote, it goes to RWW (even from outside the network) but there is a certificate error of a mismatched address. When I access https://remote.triton-ind.com/ from inside the LAN it works with no problems.

I have read about how to set this up, but obviously, I am missing something. I think the problem is either that the certificate is in the wrong location, or the website is still pointing to the internal forward lookup zone (triton.local) instead of the one I made (triton-ind.com). Also when I look in IIS under MAINSERVER (local computer), I only see a FTP Sites subdirectory and not Sites, so I do not know where the sites shown in the Windows SBS Console are located.

Here is what I have done so far:
1. Forwarded ports to my local DNS server (DC) running Windows SBS 2008 (TCP ports 25, 80, 987, 443, 1723 to 192.168.123.64)

2. Created a primary forward lookup zone (that does not store it in the AD), named triton-ind.com, and created two Host (A) files. One is named remote and pointing to 192.168.123.64 (my internal DNS) for the remote.triton-ind.com. The other is named www and pointing to the public IP address of our externally hosted website (www.triton-ind.com).

Last note, everything is done in IE 7. Thanks in advance, and let me know if you need screen shots or additional information.

ASKER CERTIFIED SOLUTION

Glen Knight

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

SOLUTION

Springy555

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

bperry88

ASKER

Thanks for the information and the speedy responses. I will call Cox today to set that up. So once Cox sets up the Host A record, will I still need a certificate? And I do not need the forward lookup zone triton-ind.com at all?

Glen Knight

You don't need to forward lookup zone on your own server and you will still need the certificate.

Springy555

You might still need the forward lookup zone if you want to resolve remote.triton-ind.com internally, depending on whether your router/firewall setup allows traffic to go out and back in on the same interface.

bperry88

ASKER

Hey, I just setup the Host A record with Cox and she said that it may take awhile to update. I cannot test the remote.triton-ind.com until I get off, but I did use an external DNS query tool, "DNS Crawler", and record appeared! I am going to hold off on getting the certificate for now, but I believe I can get it through my existing domain provider: networksolutions.com. I appreciate the help and information. I hope you guys are ok with me splitting the points because you both gave me valuable information.

Take care.

Glen Knight

That's good with me.
You need to award points for which ever post(s) helped you and if that is both of us then so be it. we are all here to help you.

I would however recommend in the future you purchase an SSL Certificate, I don't know how much networksolutions.com charge but GoDaddy are very reasonable.

Springy555

Glad it went well. I've tested and can see the page displaying fine. As you mentioned just the commercial certificate is needed.