Solved

Making an ECM (OpenText Content Server 10) available to external parties over the internet

Posted on 2014-03-17
4
526 Views
Last Modified: 2016-12-07
We are running OpenText Content Server 10 in our company.  Currently our internal users access via a web interface or with a desktop client. We have a need to give access to a couple outside parties for collaboration.  I am trying to find a secure solution to this but am banging my head against the wall.....Here's what I was thinking....Anyone have any suggestions?  advice?

- Create a NAT policy on my firewall (SonicWall NSA3500) from one of our public IP to the internal IP of the server.
- Purchase a trusted cert and install on the server(IIS)
- Create local(app) accounts for these people in CS10 with limited access to ONLY the folders they need.
- If these folks are all connecting from just a few IP addresses, I could also limit access based on IP addresses.


Good idea?  Bad idea?? We are trying to make this as easy as possible for the outside parties, so the executives really don't want to have to have them install a VPN client....
0
Comment
Question by:tenover
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
4 Comments
 
LVL 8

Expert Comment

by:N-W
ID: 39941018
Locking down the firewall rules to certain IP addresses is a good idea. You could also potentially limit the firewall rules to be active on a schedule (i.e. only during business hours).

As long as the IIS server is secured and the user's passwords are strong, you shouldn't have an issue.
0
 

Author Comment

by:tenover
ID: 39941126
That's what I figured. When you say "as long as the IIS server is locked down", do you mean with a secure certificate and no anonymous access, or something more?
0
 
LVL 8

Accepted Solution

by:
N-W earned 500 total points
ID: 39941147
There's a lot more to consider. Have a look through this to give you an idea: http://blogs.msdn.com/b/alikl/archive/2008/02/28/securing-iis7-windows-server-2008-security-guide.aspx
0
 

Expert Comment

by:Reiner Merz
ID: 41917556
Think of using Domains in the Content Server if you do have external contacts and internal. Domains will separate this groups by building a "separate virtual content server" for the external users. Domains are avaliable in 10/10.5 and 16
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Remote Web Workplace (SBS 2011) replacement ideas 5 124
2012 Remote Desktop Server - What do you need? 13 94
RDP connection error 5 67
Print to local printer - Windows 7 RDP 9 68
Remote Desktop Shadowing often has a lot of benefits. When helping end users determine problems, it is much easier to see what is going on, what is being slecected and what is being clicked on. While the industry has many products to help with this,…
This article shows how to convert a multi-page PDF file into multiple image files, with one image file created for each page of the PDF. It does this by utilizing an excellent, free software package called GraphicsMagick. The solution is amazingly s…
Sometimes we receive PDF files that are in the wrong orientation. They may be sideways or even upside down. This most commonly happens with scanned or faxed documents. It is possible to rotate the view of these PDFs with the free Adobe Reader produc…
In this seventh video of the Xpdf series, we discuss and demonstrate the PDFfonts utility, which lists all the fonts used in a PDF file. It does this via a command line interface, making it suitable for use in programs, scripts, batch files — any pl…

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question