You have to ask yourself if you really want to expose you InfoView / ePortfolio environment to the External users....?
From a security POV, most of my clients write a small web-application using the .NET or Jave SDKs.
That "custom" application sits on their EXTRA-net for public access.
It communicates to the internal BOE-XI (R2) servers via the SDK.
There are firewall permissions and CMC security settings to ensure that the "custom" application has very limited access.
You could just put a copy of InfoView / ePortfolio on the external site and grant "Guest" access to anyone - but I expect that would not meet your security requirements.
Also - FYI - time to migrate off CE10 to BOE-XI (R-3.1). It is no longer supported by the vendor.
Senior Business Intelligence Consultant
Toronto, Canada
SeagateInfo 7 -> Crystal Enterprise -> BOE-XI (R2) / (R3.1) | Crystal ( 7 -> 2008) design | WebI design | Best practices for Java / .Net / Web Services