The following checklist provides the steps required to configure a Configuration Manager 2007 site for Internet-based client management and can be used in conjunction with the following administrator workflow: Administrator Workflow: Configuring a Site for Internet-Based Client Management.

Step Reference

Confirm the decision to configure the site for Internet-based client management.

Determine If You Should Use Internet-Based Client Management

Prerequisites for Internet-Based Client Management

Decide on server placement.

Determine Server Placement for Internet-Based Client Management

Make any necessary changes to your network infrastructure, such as firewall and proxy server configuration.

Supported Scenarios for Internet-Based Client Management

Determine Requirements for Proxy Web Servers to Use With Internet-Based Client Management

Determine the Ports Required for Internet-Based Client Management

Register on Internet Domain Name System (DNS) servers the Internet fully qualified domain name (FQDN) of the site systems and network load-balanced clusters that will support Internet-based client management.

Site System Roles that Support Internet-Based Client Management

Configuring DNS for Configuration Manager Site System Roles

Install the site systems in Configuration Manager 2007, and configure them with the Internet FQDN.

How to Configure the Internet FQDN of Site Systems that Support Internet-Based Client Management

If you are using a network load balancing (NLB) cluster, specify the Internet FQDN for the NLB cluster in Configuration Manager 2007.

How to Configure the Internet FQDN of an Internet-based NLB Management Point

How to Configure the Internet FQDN of an Internet-Based NLB Software Update Point

If the Internet-based site systems are in a different forest than your site server, configure these site systems to accept data retrieval from the site server.

How to Configure Internet-Based Site Systems to Allow Only Site Server Initiated Data Transfers

If the server running the software update point that allows connections from the Internet needs to synchronize with an intranet software update point, configure as follows:

  • If the software update point that allows connections from the Internet is on the intranet, configure automatic synchronization.

  • If the software update point that allows connections from the Internet is in the perimeter network, use the manual export and import synchronization procedure to prevent connections from being initiated from the perimeter network into the intranet.

How to Synchronize Software Updates

How to Synchronize Updates Using Export and Import

Configure the site systems that will support Internet-based client management to accept connections from Internet clients.

How to Configure a Management Point for Internet-Based Client Connections

How to Configure a Distribution Point for Internet-Based Client Connections

How to Configure a Fallback Status Point for Internet-Based Client Connections

How to Configure a Software Update Point for Internet-Based Client Connections

Configure distribution points to transfer content using BITS, HTTP, and HTTPS.

How to Configure a Distribution Point to Transfer Content Using BITS, HTTP, and HTTPS

If the Internet-based site systems are in a different forest than your site server, and you want the additional security of the SQL Server connection to be initiated from the intranet rather than from the perimeter network, configure a Microsoft SQL Server replica.

How to Configure SQL Server Site Database Replication

Next Steps

See Also