Network Diagram for Internet-Based Servers - Scenario 2 with Child Site

Applies To: System Center Configuration Manager 2007, System Center Configuration Manager 2007 R2, System Center Configuration Manager 2007 R3, System Center Configuration Manager 2007 SP1, System Center Configuration Manager 2007 SP2

This network diagram shows server placement and firewall configuration for the following supported scenario for Internet-based client management in Configuration Manager 2007:

  • Scenario 2: A Configuration Manager 2007 site that doesn't support intranet clients and is in the perimeter network only. The Configuration Manager 2007 site that is configured for Internet-based client management is a child site of your Configuration Manager 2007 hierarchy.


If you have a server running the software update point role that needs to synchronize software update metadata with an active software update point in the parent site, Configuration Manager synchronizes the software updates metadata with a connection from this server to the active software update point and most connections will use HTTPS. However, when the software updates metadata has associated license terms (for example, if the software update is a service pack), the connection uses HTTP. To avoid these in-bound connections from the perimeter network to the intranet, use the export and import method of synchronizing the software updates as described in the following topic: How to Synchronize Updates Using Export and Import.

Internet-based diagram: Scenario 2a

See Also


Determine Server Placement for Internet-Based Client Management
Overview of Internet-Based Client Management
Supported Scenarios for Internet-Based Client Management

For additional information, see Configuration Manager 2007 Information and Support.
To contact the documentation team, email