Identity Server IP question

[brembold]

Hey all,

I have my identity server installed inside my network with an internal IP address. My Acess gateway has both internal and external ip addresses to serve up pages for for users at the office and at home.

THe reverse proxy works fine inside the network, but when I try to access from outside the network, I get prompted for the SSL cert by the access gateway, I accept it and then the browser gives a page not found.

Looking at the http headers, it looks like it's trying to communicate with the identity server. Do I need to assign another IP to the identity server so it can communicate both internally and externally? What is the proper setup on where to setup the identity server? In the DMZ?

I'm trying to learn all of this on the fly, so any help would be greatly appreciated.

Thanks.
-B