locked
UAG = TMG + More Options ? RRS feed

  • Question

  • Hello.

    TMG and UAG are now both available in Beta.

    From the MMC first look, both looks the same.

    We know that TMG is the next version of ISA Server and UAG is the next version of IAG.

    We know that TMG is mostly for outbound, whereas UAG is mostly for Inbound .

    But we need to know one thing, as UAG is built on top of TMG, can we use UAG as a TMG server as well ?

    That is to create outbound rules, and create block list and stuff like this.

    Are these options there available but not supported to be used ? or they are not available at all .

    Wednesday, July 22, 2009 6:30 PM

Answers

  • Nathalie,

    The options are there - but they are largely unsupported. As we turn the corner towards RC and RTM of UAG, we will issue a support statement outlining which TMG scenarios are supported in UAG and which are not.

    As a general rule, we will only support scenarios with TMG that support UAG's remote access value/story.

    Uri - UAG Product Manager

    • Marked as answer by Erez Benari Friday, July 24, 2009 4:31 PM
    Wednesday, July 22, 2009 9:14 PM

All replies

  • Nathalie,

    The options are there - but they are largely unsupported. As we turn the corner towards RC and RTM of UAG, we will issue a support statement outlining which TMG scenarios are supported in UAG and which are not.

    As a general rule, we will only support scenarios with TMG that support UAG's remote access value/story.

    Uri - UAG Product Manager

    • Marked as answer by Erez Benari Friday, July 24, 2009 4:31 PM
    Wednesday, July 22, 2009 9:14 PM
  • Hello Uri,

    So everything in TMG is available also with UAG ( SSL inspection , URL filtering , ... ) but they will be not supported to be used in UAG.

    looking forward for the support statement so that we make our clients understand what is supported and what is not .

    Thursday, July 23, 2009 8:50 AM
  • Full TMG is bundled with UAG and it is not constrainted tecnically today. However, TMG-specific scenarios, and in particular, forward proxy with URL filtering, SSL inspection, anti-malware is not supported. While it may work, it may destabilize core UAG functionality and therefore strongly not recommended.

    We are planning to issue our support statement as part of the technet docs in the coming weeks

    Saturday, July 25, 2009 7:37 AM
  • Hi,

    We would like to have a clarification regarding UAG where TMG options will be used.... for example we will be having external users connecting to internal resources and use VPN to connect .... but in the same time for example, we do not allow vpn users to split stream and we only allow them outbound connection through ISA/TMG..... now with UAG, we would like to have users connect through VPN to our LAN, and in the same time allow them outbound connection through UAG, and to benefit from TMG options such as URL Filtering... SSL inspection and so on...

    As the products are still in Beta TMG  and UAG, we would like from now to know which to use for our clients.


    Tarek Majdalani | MS Forefront Edge Security MVP | http://www.elmajdal.net
    Monday, August 3, 2009 7:09 PM
  • You will have to deploy two boxes (or two VMs) - one for UAG, controlling inbound access and one for TMG, controlling outbound protection

    Wednesday, August 5, 2009 9:08 AM
  • Hello,

    If Microsoft thinks that small to Mid bus. companies are going to purchase two products one for inbound and one for outbound, think in my opinion, I think one of these products will lose, and the same story with IAG will be repeated, the only different is that this time people will be able to install the software ( UAG ) and then say oh no good that i didnt purchase . At least with IAG we were not able to judge because it was hardware base., oh yah i know it had VHD after ages.

    i just wonder why these two products were not done in a single perfect one ?

    it is as if Microsoft saying to us if you want to clap, then use both hands ( install two boxes one for UAG and one for TMG ). But if you want to write, for sure you can use one of these hands ( if you want inbound then use UAG, outbound TMG )...........!!!

    Wednesday, August 12, 2009 5:28 AM
  • For small and medium-size customers, who are looking for a single box solution, TMG is the way to go. UAG is primarily targeted to large and enterprise customers, looking for comprehensive remote access solution
    Friday, December 25, 2009 7:09 PM