Hoping someone can let me know if im on the right track.
I use IIS on my file server within my network. I have an apache2 server which takes all HTTP and HTTPS requests and by way of reverse proxy sends them to the correct server.
Within the network you can access IIS though HTTP and it will prompt for UN/PW based on Windows Authentication. Obviously that isnt safe across the internet and especially when accessing from untrusted networks.
So my solution is:
remote network connects on SSL to my reverse proxy server. Reverse proxy connects on HTTP to my IIS server remote client gets the basic authentication dialog box though the reverse proxy using its SSL connection which i assume means its secure?