Secure Web and NAV Connection

How to Secure the Connection between Web and NAV

If the server environment running Sana and the server environment running Microsoft Dynamics NAV are not in the same network it is recommended to secure the data transfer between these environments.

You have two options, either set up SSL for the NAV Web service or VPN connection between the Web server and NAV server.

• If you set up SSL for the NAV Web service, make sure that you can reach the Web service via the port used by the Web service. If the SSL certificate is self-signed, make sure that this certificate is also added to the trusted root certificates on the Web server.
  
  For information on how to set up SSL for the Microsoft Dynamics NAV Web service, see 'Walkthrough: Configuring Web Services to Use SSL' in the Microsoft Developer Network. Select you Microsoft Dynamics NAV version at the top of the article to see the correct manual.
  
  
• If VPN is possible in the infrastructure, make sure it is a VPN tunnel.
  
  
   NOTE

  If the Sana web store is hosted on Microsoft Azure enabling a VPN connection from the NAV server to Microsoft Azure might cause operational issues. Therefore, if your Sana web store is hosted on Microsoft Azure we recommend to set up SSL for the NAV Web service.

  
  For more information, please follow these links:
  Windows Server 2008:
  https://technet.microsoft.com/en-us/library/cc725734(v=ws.10).aspx
  https://technet.microsoft.com/en-us/library/gg252532(v=ws.10).aspx
  http://www.thomasmaurer.ch/2010/10/how-to-install-vpn-on-windows-server-2008-r2/
  Windows Server 2012:
  https://technet.microsoft.com/en-us/library/dn303496.aspx
  http://www.thomasmaurer.ch/2012/07/how-to-install-vpn-on-windows-server-2012/
  

To enable IP checking the next steps should be completed:

Step 1: On the Web server go to 'Control Panel' and run 'Windows Firewall'.

Step 2: Move to 'Advanced' tab, select the connection and then click 'Settings':


Windows Firewall: Network Connection Settings

Step 3: Add a new service and configure it with 'Description of service', 'IP Address' and 'Port number':


Adding a New Service and Its Configuration