In my recent travels, several IT Pros have asked about resources to help plan a System Center Configuration Manager deployment between DMZ and/or otherwise protected subnets. Below, I've included links to some great resources that I've found very helpful in the past when planning ConfigMgr deployments of this nature.
- Supported ConfigMgr scenarios for Internet-based Client Management
- Pre-requisites for Internet-based Client Management (particularly useful if you have firewalls / proxies / reverse proxies that are filtering specific HTTP verbs)
- Ports used by ConfigMgr
If addition, Chris Nackers posted a nice spreadsheet on MyITForum.com that takes the port requirements as inputs and allows IT Pros to more easily align to their specific site systems when planning network communication for site architecture.