Administering Security with Office Server Extensions

If you plan to make your Web server available on the Internet, and if you want to limit inbound and outbound access to your intranet, then you need to use a proxy server such as Microsoft Proxy Server. A proxy server is also called a firewall.

By using a proxy server, you can help control how remote clients — such as users connecting over the Internet — access your server applications. A proxy server can also help you control how users within your local network access external servers.

When you use a proxy server with Microsoft Office Server Extensions (OSE), the following requirements and limitations apply.

• You must use Basic authentication to help secure logons to your OSE-extended web.

  To help maximize security, use Basic authentication with Secure Sockets Layer (SSL) encryption. This combination helps prevent network eavesdroppers from viewing client/server conversations on your OSE-extended web.

  ---

   Note    IIS does not support Windows NT Challenge/Response authentication across a proxy server.

  ---

• OSE functions only with a proxy server that does not require authentication.

  Some proxy servers require clients to log on to the proxy server before establishing a connection to the Internet and an intranet. OSE does not function across proxy servers that require this type of authentication. You can configure Proxy Server to require clients to log on to the proxy server, but you must not configure the Proxy Server this way if you want to use it with OSE.

See also

It is highly recommended that you use a proxy server if you are connecting your Web server to the Internet. For more information about Microsoft Proxy Server, see the Proxy Server 2.0 Web site.