26.04.2015 Views

Team Development with Visual Studio Team Foundation Server

Team Development with Visual Studio Team Foundation Server

Team Development with Visual Studio Team Foundation Server

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

• This approach supports the use of Integrated Windows authentication and enables you to<br />

leverage existing enterprise infrastructure.<br />

• If you already have a VPN set up, this is the easiest solution to adopt.<br />

Disadvantages<br />

• A VPN solution might not be set up for your infrastructure, or might not be available to your<br />

remote users.<br />

For more information about creating a VPN, see http://support.microsoft.com/kb/324747.<br />

Publishing TFS Through a Reverse Proxy<br />

With this approach, you install a TFS server on your internal network and use the ISA <strong>Server</strong><br />

Web publishing functionality to expose it to the external network. Remote users access TFS over<br />

SSL and use Basic authentication. This option will not work unless you have TFS SP1 installed.<br />

Networks <strong>with</strong>out a domain controller on the perimeter<br />

Figure 17.2 shows architecture for exposing TFS over ISA <strong>with</strong> a domain controller on the<br />

internal network.<br />

Figure 17.2 TFS over ISA, Domain Controller on Internal Network Architecture<br />

If you do not have a domain controller on your perimeter network, you can open a port on the<br />

firewall to allow a Lightweight Directory Access Protocol (LDAP) connection from the ISA<br />

<strong>Server</strong> to your internal domain controller, specifically to authenticate external TFS users.

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!