With Flex 1.5, Macromedia strongly advised to use IIS (or similar) and connect to Flex and CF via an ISAPI gateway. This worked well and leveraged IIS for security models and SSL.
It looks like FDS (for data services at least) does not work in this manner and the Flex app talks directly to the FDS server on port 8301 (or whatever) and FDS can have its own internal security model. If all of your data access is via FDS, does it make any sense to put CF behind IIS (or similar) or just let FDS talk directly to CF on port 8300 (or whatever)? This works in a development environment, but is it the best practice for production? If Flex does talk to directly to FDS on port 8300 (or whatever) through JRun (or whatever) is it possible to utilize SSL?
