Can the different product roles be on the same server?

  1. The Admin Portal and the SQL Server can be located on the Internal Bastion and the SIP Filter(s) must be installed on the Edge / Front End.
  2. The SQL Server can also share a server / instance with another SQL DB.
  3. Bastion could be installed on an Edge Server, but Microsoft recommends against installing Reverse Proxies on the Edge Server. If this is done, the Bastion must have its own IP address. 
  4. The Bastion DMZ and Internal Bastion need to be on different servers (one is in the LAN and one is in the DMZ).