Welcome to ISAserver.org

What about using DirectAccess and TMG Together?

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [Forefront Unified Access Gateway 2010] >> DirectAccess >> What about using DirectAccess and TMG Together?

Page: [1]

Message

<< Older Topic Newer Topic >>

What about using DirectAccess and TMG Together? - 11.May2010 10:55:37 AM

tshinder

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline

Yes, you can do that!

When you deploying a UAG DirectAccess solution, the TMG firewall is automatically installed on the UAG DA server. You don't have to do anything special to make it work, as the UAG installation program installs TMG and also integrates TMG configuration with UAG configuration, as well as the UAG DA configuration.

However, if you want to "roll your own" and not use UAG, you can do that. The TechNet entry "Planning DirectAccess with Forefront Threat Management Gateway" at http://technet.microsoft.com/en-us/library/ee731903(WS.10).aspx gives you some background information on this.

For specific configuration information on how to configure DirectAccess on the TMG firewall, check out the TMG Team Blog post at http://blogs.technet.com/isablog/archive/2009/09/23/forefront-tmg-and-windows-7-directaccess.aspx

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.

Post #: 1

Featured Links*

RE: What about using DirectAccess and TMG Together? - 11.May2010 11:43:34 AM

Jason Jones

Posts: 4663
Joined: 30.Jul.2002
From: United Kingdom
Status: offline

Here we are again

Assuming you are happy with the limitations of poor HA and the need for IPv6 intranet servers, then yes, TMG is viable.

I think NAT64/DNS64 will be needed for most environments for quite some time yet, which TMG cannot offer

TMG = viable, but not really an elegant or workable solution for many...

Cheers

JJ

_____________________________

Jason Jones | Forefront MVP | Silversands Ltd
My Blogs: http://blog.msedge.org.uk/ and http://blog.msfirewall.org.uk/

(in reply to tshinder)

Post #: 2

RE: What about using DirectAccess and TMG Together? - 12.May2010 7:56:19 PM

tshinder

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Jason,

Ha! You bet! It's sort of like Windows DA with the features of TMG thrown in.

But the UAG NAT64/DNS64 is the "secret sauce" that pretty much makes it required on any enterprise network around today.

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to Jason Jones)

Post #: 3