LFWeblink server outside firewall/LaserFiche database inside firewall

This configuration allows outside access to the LaserFiche database server only through the LFWeblink interface. It requires careful configuration and entails an extra level of complexity for the firewall.

Refer to the firewall diagram legend for explanations of the graphical conventions used below.

		An internet user (via web browser) requests information from the LaserFiche database through a web site incorporating LFWeblink.
		The request is received by the HTTP (web) server, which opens a connection with LFWeblink. LFWeblink opens/continues a connection with the LaserFiche database server via the firewall (as a proxy).
		The firewall is configured to allow Internet (web, email, ftp, etc.) access from the private network. All direct access initiated from the internet to the private network is restricted. When LFWeblink makes a connection to the firewall, the firewall passes the request on to the LaserFiche database server located on the private network. Special care should be taken to only allow access to the resources that LaserFiche needs for connection (a TCP/IP port for the NT version and NCP access for the NLM) and to only allow connections coming from the HTTP/LFWeblink server.
		The LaserFiche database server receives the connection command and provides the requested information back to the user through LFWeblink.