Suggestions for web based browser that is highly locked down?

ThorinO used Ask the Experts™
So this is a weird request, I don't know if this exists. We are a web development company. We are looking to create a solution for our clients to view their websites before they go live.

- HOSTS files are out because sometimes users don't have administrative access.
- We don't want to create a subdomain in DNS for multiple reasons.
- We need to use their actual domain in some cases (redesign)

So the thought was to use something like Microsoft's RemoteApp. The problem(s) with this are:

- The user may not have access to port 3389.
- We would need to setup a physical server in the DMZ, lock it down, and maintain it
- Cost for license and CALs

So with that said, we are looking for some solution that will meet these needs without the problems. The only way around this I can think of is having something under our control, that we can edit the HOSTS file on, that the client can then access via port 80.
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
IT Manager
hmm, using the same domain name will be the kicker here. The only way I can think of is an RDP/VDI type session if that is a requirement. You can access RDP ofer SSL (the MS SBS product does it).

If  you don't need to use the same domain name, then you can maybe investigate a reverse proxy type solution so that you could setup a customer-specific URL and have it pull the demo site.


I checked out Remote Web Access 2011 in SBS and it looks like it needs port 443 and 987. I'm not sure if it can be changed or if the 987 is needed for the RDP portion of the RWW, it might be used for something else.

Do you have any experience with the reverse proxy? I think this would be a better solution as it would be cross platform compatible and from the sound of it I would just need to point their browser at a proxy?
brwwigginsIT Manager

The port 987 is for the companyweb application.

I don't have that much experience with the reverse proxy. I'm just now getting to play with Microsoft's Forefront Unified Access Gateway product which is their solution.

But yes, in general the user points their browser at the reverse proxy and it would connect to the back-end server for them.


OK sounds good, I will open another question about setting up a proxy to do what I want it to do. Thank you for the idea, it is a good one.



Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial