Hi, @Joe Heaton
Thank you for posting in Microsoft Q&A forum.
As far as I know, when we configure IBCM, we always install the primary site in work network with the internal DP and MP, then install a site server in the DMZ with DP and MP to respond to internet clients' requests.
So, when you say "it was all installed on our Primary site server", it's not very clear to me, would you have a more detailed description about your IBCM configuration?
If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.