Our Security department has decided that they want new web servers for external facing content to be in the DMZ. Currently, we reverse proxy everything. Currently have TMG and ISA as reverse proxy ...

I'm experimenting with a new setup: placing an IIS server behind a firewall and forcing all outgoing connections through a proxy server requiring authentication. The IIS server itself is a Citrix Web ...