Design

ARK2FA has 2 different installations: Internal and DMZ. Depending on the need, only Internal installation or both installations can be made.

Internal system: It is used only for access by users in the internal network. Although not recommended, it can also be used for Internet access in environments where there is no physical DMZ network. With Internal ARK2FA, users can manage their passwords and accounts, while administrators can manage ARK2FA and report. The server does not have to be a domain member. The recommended configuration is to be a domain member.

DMZ: Designed for access by Internet users only. It directs incoming requests on the Internet to the Internal ARK2FA server like a proxy and forwards the response to the user. It has no business logic. Even if you have administrative rights on ARK2FA, administrative screens will not work. Access to the Internal system is required to open administrative screens. As with all servers in the DMZ network that open to the internet, the ARK2FA DMZ Setup must not be a member of the domain.