Secure Web and NAV Connection

How to Secure the Connection between Web and NAV

When Sana Commerce is installed to live environment you have to check the security between the Web server and Microsoft Dynamics NAV server to prevent the MS Dynamics NAV service running and be publicly accessible.

There are two ways to configure the security between the Web server and Microsoft Dynamics NAV server:

• Use SSL (request a certificate) and IP checking.
  For information how to configure Microsoft Dynamics NAV services to use SSL see:
• • Configure Microsoft Dynamics NAV Web Service to Use Self-Signed SSL
  • Configure Microsoft Dynamics NAS to Use Self-Signed SSL
  • Configure Microsoft Dynamics NAV Services to SSL
    
    
• Setup a VPN between the Web server and Microsoft Dynamics NAV server. For more information, please follow these links.
  Windows Server 2008:
  https://technet.microsoft.com/en-us/library/cc725734(v=ws.10).aspx
  https://technet.microsoft.com/en-us/library/gg252532(v=ws.10).aspx
  http://www.thomasmaurer.ch/2010/10/how-to-install-vpn-on-windows-server-2008-r2/
  Windows Server 2012:
  https://technet.microsoft.com/en-us/library/dn303496.aspx
  http://www.thomasmaurer.ch/2012/07/how-to-install-vpn-on-windows-server-2012/
  
  

  The preferred method is VPN configuration.

To enable IP checking the next steps should be completed:

Step 1: On the webserver go to 'Control Panel' and run 'Windows Firewall'.

Step 2: Move to 'Advanced' tab, select the connection and then click 'Settings':


Windows Firewall: Network Connection Settings

Step 3: Add a new service and configure it with 'Description of service', 'IP Address' and 'Port number':


Adding a New Service and Its Configuration