Now that we have most of our services reliant on SSO and ADFS, I'd like to strengthen it a bit. Currently, we are setup in this fashion: fs1.company.com -> [FEDERATION PROXY] -> [ADFS SERVER (ALSO DC) ...

With Windows Server 2012 R2, Microsoft has built in a reverse-proxy feature. The Web Application Proxy securely publishes internal resources out to the Internet for access by both corporate-owned ...