I hope someone here has experience with this and can give me some advice. I know what I want to do, but even outside of DNN it’s not something I normally do, but I do have experience with the technologies I want to use. Also, I realize it’s not an entirely DNN issue, but again I am hoping to hear from someone who has done this to support a DNN environment.

The scenario:
 We are building a DNN site which will have personal information on the users who use it, and will also have links to several different databases with information that absolutely has to remain protected.
 The current setup involves accessing this information through an SSL enable website which sits behind the firewall on the LAN that contains the databases. It’s run this way for a decade with no security issues, but we want to change it up a bit.

What I want to do:
 I have an ASA5510, and my server layout will be to place a Windows 2008 stand-alone web server on the DMZ.
 I want to run a small publicly facing page on the DMZ web server, which does not require a login, and just has basic  info about the company, etc.

 Preferably this page would be a small DNN site. What I don’t know is can I have two DNN sites on different machines   that are still “connected” to each other.

 On this public page on the DMZ web server, would be a login button, and when that is clicked, I want to user to be   prompted for authentication to the private DNN site, but, and here is the important part, I want that authentication   to still take place on the DMZ server, so no one gets passed on to the internal DNN server until after they are  authenticated.

 I would also like to use RADIUS, IAS, to facilitate this authentication to AD within DNN.

 Once authenticated, I have no problem with the system needing to “move” the flow of data over to a separate SSL   enabled channel. In other words, the users would be directly connecting to the internal web server and not running   through the DMZ web server.

To sum up, here are the questions I need answered.

 1.Can DNN sites be linked that exist on separate web servers? I realize this may not be necessary for   authentication, however.

 2.If I use AD authentication in DNN, would that allow me to benefit from using RADIUS, IAS as well?

 3.Is there a case scenario, or best practices, for DNN setup using a DMZ front end and internal LAN back end out  there?

Please tell me if I can do this or am just crazy! Thanks,

Michael Zenzer