Secure Web and AX Connection

How to Secure the Connection between Web and AX

When Sana Commerce is installed to live environment you have to check the security between the Web server and Microsoft Dynamics AX server to prevent the MS Dynamics AX Web service running and be publicly accessible.

There are two ways to configure the security between the Web server and Microsoft Dynamics AX server:

• Use SSL (either obtained from a certification authority or self-signed) and IP checking.
  For information how to configure Microsoft Dynamics AX Web services to use SSL, see 'SSL Certificate for AX Web Services'.
• Setup a VPN between the Web server and Microsoft Dynamics AX server. For more information, please follow these links.
  Windows Server 2008:
  https://technet.microsoft.com/en-us/library/cc725734(v=ws.10).aspx
  https://technet.microsoft.com/en-us/library/gg252532(v=ws.10).aspx
  http://www.thomasmaurer.ch/2010/10/how-to-install-vpn-on-windows-server-2008-r2/
  Windows Server 2012:
  https://technet.microsoft.com/en-us/library/dn303496.aspx
  http://www.thomasmaurer.ch/2012/07/how-to-install-vpn-on-windows-server-2012/
  
  

  The preferred method is VPN configuration.

To enable IP checking the next steps should be completed:

Step 1: On the web server go to 'Control Panel' and run 'Windows Firewall'.

Step 2: Move to 'Advanced' tab, select the connection and then click 'Settings':

Windows Firewall: Network Connection Settings

Step 3: Add a new service and configure it with 'Description of service', 'IP Address' and 'Port number':

Adding a New Service and its Configuration

If the above mentioned steps are performed then the connection between the Web server and Microsoft Dynamics AX server is secure.