Vulnerability in EPiServer.Forms
HelloI just wondering if it's possible to have Commerce Manager in a separate server than the ordinary web.I know there is some settings that point to the Manager site from the web site.
Yes is recommended to have on sperate server not publically accesible unless needed
To extend Mark Hall's answer a bit: Yes, it's possible. We also recommend to put Commerce Manager to DMZ server with high security settings - it's not a public site and have important/sensitive information.
"some settings that point to the Manager site from the web site" is the CommerceManagerLink setting in web.config. It's required to access Commerce Manager from the front-end site ("the web site" in your context). You simply point to the http://<commercemanager.com>/Apps/Shell/Pages/default.aspx. If you don't want to access Commerce Manager from the front-end site, it can be left blank.
ok, thanks for the reply