SWAT and RWAT (Strategic and Redbeam Web Asset Tracking) are our old web application supporting the first variant of SaaS Asset Tracking (hopefully to be moonlighted 2021).
2 Servers
172.16.11.201
Redbeam Asset Tracking Websites
Registration Manager (for WAT & old SRP)
SQL Server running databases support RWAT, SWAT, and Registration Manager
172.16.11.202
SST Asset Tracking Websites
Networking:
The Redbeam site is pointed directly to our public IP (HTTPS only) and then forwarded directly to 172.16.11.201
The Strategic site is pointed to our Google Cloud public IP, which is then routed across the VPN tunnel to 172.16.11.202 (not ideal, but we didn't have extra public IPs when we set this up). If this stays around after 2020 then we need to move this to a public IP address we own
SSL Upkeep:
We currently encrypt both websites with wildcard SSL using SANs (google it). We obtain these certificates from Digicert.
They should be applied using the digicert tool directy into IIS and mapped in the bindings of each website
DO NOT TURN ON SNI.. IT BREAKS OLD WINMO HANDHELDS!!!
Backup:
Backups are taken via a sql 'job'. This can be found on 172.16.11.201 in SQL, and runs nightly at 1:00AM
After the backup completes, there is a windows scheduled task 'MoveSqlBackups' that runs everyday at 4:06AM. It runs a batch file at C:\users\administrator\Documents\backups.bat This batch dates the files and copies them off to the NAS (192.168.2.21) and then deletes them off the server to keep it from getting overrun with old backups.