How NOT to Deploy Client Access Servers by bradhugh is worth reading. He stresses mainly on a couple of points:

  • All Client Access Servers in the same site should be configured the same way.
  • Installation of a Client Access server in a perimeter network is not supported.

While you are at it, read his post(s) on CAS Load-Balancing Best Practices Part 1 and Part 2.

– Thanks, Jinesh.