Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have an internal windows authenticated website that I need to expose anonymously to external users.

extern: (public) intern: http://privatefoo/ (requires windows auth)

I want people hitting to see no security prompt, just get access to privatefoo - I know this is possible in a simple reverse proxy setup but does anyone know how to make the proxy provide windows credentials?

share|improve this question

Consider using Application Request Routing (ARR).

This will do the reverse proxy using IIS7 all the way. You can have it on the same machine or a separate machine(s).

For authentication, your best bet is to have the private site auto authenticate requests from the reverse proxy. You can do that with a HTTP Module on the private site that runs before authentication.

I'm curious though why you would lock down a site locally that you are giving the world access to anyway? If you're giving the world access to it, why not open it up privately too?

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.