Move Confluence from Internal to DMZ

Ray Geronimo

We currently have an in-house Confluence instance which users currently authenticate with AD via LDAP and currently only accessible via VPN from outside the corporate network.

If we decided to move the existing instance from inside our firewall to DMZ, what would be the best practices? Has anyone tried this and what were your experiences?

Davin Studer

First of all make sure it is server vis SSL. You don't want user names and passwords being transmitted unencrypted. Also, I would set up monitoring on your logs ... you might want to turn on web server access logging. I would also double check your global permissions for anonymous access. Do you need it? If not make sure it is off. If you do need it verify annonymous access on all your spaces is set correctly.