Sync files from one server to another
one private network , 1 public network. both have there own dedicated internet lines , not cross @ all. in public network there 1 server control internet access , allow read access files. these files shared on server in private network. willing link 2 servers through network ports , have local user on public server has read access private server access files. need user run routine every week sync files private server public server, not other way around. public server needs stay current files located on private server public server cannot allowed make changes files on private server. have suggestions on how achieve without compromising security or file integrity? servers must not have access between each other except 1 local user read permissions on files. thanks.
to fulfill demand of description, may need deploy isa server in environment control user access , security internet. using isa server, internal users can establish connection public server said via setup vpn connection, encrypted l2tp protocol. also, may need deploy domain controller in internal network user authentication.
for security consideration, may consider putting public server (it domain controller) in dmz , private server (in internal network), protected isa server. file replication among these 2 servers, may implement dfs-r on windows server 2008 synchronize folders on servers in scheduled time. meanwhile, control user access behavior, may configure share permission , ntfs security permission of replicated folder among 2 servers let domain users can read files , folders.
internet dmz
vpn client---------------------------isa server--------------------------------public server
|
|
|lan
|
private server
for more information dfs-r , isa server, please check following online document.
step-by-step guide distributed file system solution in windows server 2003 r2
http://technet.microsoft.com/en-us/library/cc737358.aspx
dfs step-by-step guide windows server 2008
http://technet.microsoft.com/en-us/library/cc732863.aspx
isa server
http://www.microsoft.com/forefront/edgesecurity/isaserver/en/us/default.aspx
for reference, here network edge security solution.
network edge security solutions
http://www.microsoft.com/forefront/edgesecurity/isaserver/en/us/network-edge-security.aspx
hope can helpful.
david shen - msft
Windows Server > File Services and Storage
Comments
Post a Comment