Using ASE (App Service Environment) to Secure Endpoints in Azure PaaS

Question

I have found Azure Sitecore PaaS has security limitations where you cannot secure the internet facing endpoints of the PaaS Apps. The only way to totally secure App endpoints in Azure is to put them in an App Service Environment (ASE). With that being said, I cannot find any evidence of anyone successfully deploying Sitecore PaaS into an ASE. I have found blogs saying they could not do it, but nothing saying it can’t be done. Has anyone successfully implemented that and can you give me some insight on how you implemented it? Thanks.

Answer 1

Deploying Sitecore to ASE is possible, but it really takes too much time to explain in this post, as it requires thorough knowledge of infra, vnets and other stuff within Azure, which is not specific ti Sitecore. Basically; get ASE to work and THEN take a few steps to deploy Sitecore to it. I know of a few companies who successfully implemented ASE in conjunction with Sitecore.

Answer 2

Please look at this: Sitecore XP Environment with App Service Environment

https://github.com/Sitecore/Sitecore-Azure-Quickstart-Templates/blob/317ce231aee3fe5a654889fcae168eab84c6118e/Sitecore%209.0.0/XPASE/README.md

for some reason it is not promoted and difficult to find at GitHub.