@jt1001001 said in SharePoint reverse proxy replacement for MS ForeFront UAG:

@JaredBusch no just Godaddy certs so far. You probably found the same blog posts I did:
http://blog.ganser.com/automate-lets-encrypt-certificate-renew-and-deployment-to-kemp-loadbalancer/

I did not find that one, and it is exactly the right thing.

I can update my cron to call a script instead of certbot renew and then have it use the Kemp API to push the cert after a renew.

So now on to setting up multiple certs per virtual service. read a post that I couldn't. if I can't this gets harder too.

Because LE on IIS still is not pretty.

@jt1001001 said in ForeFront UAG trunks stopped working:

We are loking at replacing our ForeFron UAG for Skype for Business reverse Proxy with Kemp Load balancers; they provide a Sharepoint config guide:
https://support.kemptechnologies.com/hc/en-us/articles/203123539-SharePoint

They offer a free Load Balancer VM if you dont' need too much bandwidth:
http://freeloadbalancer.com/features/

I unfortunately am not part of the project team designing and implementing the Kemp solution so I can't tell you much about its capabilities YET

Thx for mentioning it. Unfortunately, we have some confidential (and up) data on our SharePoint. A third party reverse proxy might (in theory) copy the data using the users session. I'm not saying that Kemp is doing this, but on the other hand ... gov'd firmware on Cisco devices.