I am writing an application which will be used for our core business workflows (client registration and management etc).
I have partners and employees who are spread across the globe, so I want to make them be able to log in and use the application, over the internet - but I want to bar everyone else (including bots and indexers) from accessing my web application.
I am using Apache as the web server, and I am using xxx.mydomainname.com to access my web application
How can I secure the application so that only the following entities can access the application:
1. Machines on my company LAN (windows networked computers)
2. Specific machines connecting across the internet
I specifically, do not want the pages indexed and archived by any bots etc, since the pages contain sensitive client information etc.
How can I secure my web application to BAN all access and permit only those specified above?