Secure Web and AX Connection

How to Secure the Connection between Web and AX

If the server environment running Sana and the server environment running Microsoft Dynamics AX are not in the same network it is recommended to secure the data transfer between these environments.

You have two options, either set up SSL for the AX Web service or VPN connection between the Web server and AX server.

• If you set up SSL for the AX Web service, make sure that you can reach the Web service via the port used by the Web service. If the SSL certificate is self-signed, make sure that this certificate is also added to the trusted root certificates on the Web server.
  
  Information on how to set up SSL for the Web service can be found in the Sana add-on installation manual for Microsoft Dynamics AX.
  
  
• If VPN is possible in the infrastructure, make sure it is a VPN tunnel.
  
  
   NOTE

  If the Sana web store is hosted on Microsoft Azure enabling a VPN connection from the AX server to Microsoft Azure might cause operational issues. Therefore, if your Sana web store is hosted on Microsoft Azure we recommend to set up SSL for the AX Web service.

  
  For more information, please follow these links.
  Windows Server 2008:
  https://technet.microsoft.com/en-us/library/cc725734(v=ws.10).aspx
  https://technet.microsoft.com/en-us/library/gg252532(v=ws.10).aspx
  http://www.thomasmaurer.ch/2010/10/how-to-install-vpn-on-windows-server-2008-r2/
  Windows Server 2012:
  https://technet.microsoft.com/en-us/library/dn303496.aspx
  http://www.thomasmaurer.ch/2012/07/how-to-install-vpn-on-windows-server-2012/
  

To enable IP checking the next steps should be completed:

Step 1: On the web server go to 'Control Panel' and run 'Windows Firewall'.

Step 2: Move to 'Advanced' tab, select the connection and then click 'Settings':

Windows Firewall: Network Connection Settings

Step 3: Add a new service and configure it with 'Description of service', 'IP Address' and 'Port number':

Adding a New Service and its Configuration

If the above mentioned steps are performed then the connection between the Web server and Microsoft Dynamics AX server is secure.