Only 1 WPE per FM server?

[tgilders]

Is it possible to connect more than 1 WPE to a FileMaker Adv Server?

I tried it, and in the Web Pub Console I get the message:

The specified FileMaker Server is not licensed for additional Publishing Engine connections. Check the FileMaker Server license or click here to specify an alternate server.

This is an interesting message because it recognizes what I'm trying to do, but only indicates that it's a licensing issue. Can one just go to FileMaker and "buy additional WPE connections???"

For some background as to why I'd like to do this: I'd like to publish an IWP app to the internet on an IIS server w/WPE in our DMZ with only IWP enabled, and then have different IIS server/WPE in our intranet with only XML publishing exposed for some of our production systems. (using the same FileMaker server to access a common database). I don't want to have to have our production systems go out the the DMZ, nor do I want web traffic coming internally.

Thanks.

[John May - Point In Space]

You can only connect one WPE instance per FM Server.

Note, however, that you can connect one WPE instance to multiple FM Servers - but I guess that doesn't really help in your case.

- John

[Steven H. Blackwell]

Thre might, and I stress might, be a way to do this. Let me mull this over a bit.

Steven

[John May - Point In Space]

FileMaker Server will only allow a connection from one WPE instance. This was verified to me by FMI engineers.

- John

[tgilders]

Thank you gentlemen for your responses.

I'm curious, what do you think about what I'm trying to do? Does it seem reasonable? Steven, being the security expert, does my desired setup seem appropriate? Or should I not worry about it, and just rely on the firewalls to isolate/deny traffic.

It did seem like a good idea to separate IWP & the XML interface since they would be used for 2 completely different purposes, within 2 different security realms.

Is there another way to accomplish what I'd like to do? Is there a way to multi-home the server that the WPE runs on, and segregate the IWP & XML interfaces to specific NIC's? (One in the DMZ, and one on the internal production network).

That setup might lend itself to other security concerns, but I'm just trying to discover options. It would be up to the security team to actually configure it and properly and test it.

Thank you for your time.