• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

What about using DirectAccess and TMG Together?

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [Forefront Unified Access Gateway 2010] >> DirectAccess >> What about using DirectAccess and TMG Together? Page: [1]
Login
Message << Older Topic   Newer Topic >>
What about using DirectAccess and TMG Together? - 11.May2010 10:55:37 AM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Yes, you can do that!

When you deploying a UAG DirectAccess solution, the TMG firewall is automatically installed on the UAG DA server. You don't have to do anything special to make it work, as the UAG installation program installs TMG and also integrates TMG configuration with UAG configuration, as well as the UAG DA configuration.

However, if you want to "roll your own" and not use UAG, you can do that. The TechNet entry "Planning DirectAccess with Forefront Threat Management Gateway" at http://technet.microsoft.com/en-us/library/ee731903(WS.10).aspx gives you some background information on this.

For specific configuration information on how to configure DirectAccess on the TMG firewall, check out the TMG Team Blog post at http://blogs.technet.com/isablog/archive/2009/09/23/forefront-tmg-and-windows-7-directaccess.aspx

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Post #: 1
RE: What about using DirectAccess and TMG Together? - 11.May2010 11:43:34 AM   
Jason Jones

 

Posts: 4663
Joined: 30.Jul.2002
From: United Kingdom
Status: offline
Here we are again

Assuming you are happy with the limitations of poor HA and the need for IPv6 intranet servers, then yes, TMG is viable.

I think NAT64/DNS64 will be needed for most environments for quite some time yet, which TMG cannot offer 

TMG = viable, but not really an elegant or workable solution for many...

Cheers

JJ

_____________________________

Jason Jones | Forefront MVP | Silversands Ltd
My Blogs: http://blog.msedge.org.uk/ and http://blog.msfirewall.org.uk/

(in reply to tshinder)
Post #: 2
RE: What about using DirectAccess and TMG Together? - 12.May2010 7:56:19 PM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi Jason,

Ha! You bet! It's sort of like Windows DA with the features of TMG thrown in.

But the UAG NAT64/DNS64 is the "secret sauce" that pretty much makes it required on any enterprise network around today.

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.

(in reply to Jason Jones)
Post #: 3

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [Forefront Unified Access Gateway 2010] >> DirectAccess >> What about using DirectAccess and TMG Together? Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts