The deployment guidelines are as follows:

•Every Access Control deployment must have at least one Designer and Proxy.

•The Proxy must be installed and configured on the same machine as the Web Adaptor that it proxies.

ArcGIS Server can be on the same machine as the Web Adaptor and Proxy, or on a different machine.

•You must protect your ArcGIS Server site with firewalls that secure access to ports 6080 and 6443.

For details, see the following ArcGIS Server documentation: Firewalls and ArcGIS Server.

•Every Web Adaptor machine must have its own Proxy.

•Every Proxy must be associated with a Designer, either on the same machine (local Designer) or on a different machine (remote Designer).

•You can use the same Designer for multiple Proxy components.