Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have an internal server that hosts an intranet application. I want to keep it completely and utterly secure and private however we need to expose some information through a WCF service to another server which hosts our external websites which CAN be accessed by the public. What is the best way to pass information between the two servers with regards to an IT setup, while keeping the intranet in house server completely secure and inaccessible? I've heard VPN was the way to go but I wanted to be sure this was the safest way.

Another question what would be the most secure way of passing data in the WCF service?

share|improve this question

migrated from Nov 20 '11 at 1:08

This question came from our site for professional and enthusiast programmers.

First of all start deploying your webserver that needs to be accessed from the internet in a so-called Demilitarized Zone (DMZ):

enter image description here

This will make sure your internet users will NEVER reach the Internal network directly, because the inner firewall is not allowing connections from your external ip through.

Then, host your WCF service in the internal network, and allow only the ip address of the web server to communicate with your WCF endpoint.You can elevate security by securing the line with certificates and client-authentication.

This is a defacto standard used by a lot of companies. Specific further additions or enhancements are possible, but this picture shows the general concept.

share|improve this answer
Thanks this is what I'm looking for do you know where I can read up on this in more detail? – Eitan Sep 21 '11 at 5:55

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.