Plan, design, and deploy Forefront United Access (UAG) with insights straight from the Forefront team at Microsoft. Forefront Unified Access Gateway (UAG)--the evolution of the Microsoft Intelligent Application Gateway (IAG)--delivers a more robust and transparent solution for inbound access from anywhere. This pragmatic guide drills into system components and capabilities, identifies software and hardware requirements, and provides scenario-based advice for planning and design, including policy control and availability and scalability considerations. You'll learn how to plan and deploy an SSL VPN solution for your environment, and how to publish applications through Forefront UAG, including Microsoft Exchange Server, SharePoint® 2010, and Windows Server® 2008 Remote Desktop Services.
Yuri Diogenes is a Microsoft senior support escalation engineer specializing in Forefront Edge Security. He is coauthor of the Forefront Community Site "Tales from the Edge", writes Forefront security articles for Microsoft TechNet Magazine, and is a primary contributor to the Microsoft ISA Server Team Blog. Before joining Microsoft, Yuri was a network advisor for a Microsoft Gold Partner and taught Network and Operating System disciplines at the University in Brazil.
Dr. THOMAS W. SHINDER, MCSE, is a Microsoft MVP for Forefront Edge Security, the author of six highly regarded books on Microsoft ISA Server, and the administrator of the largest community of ISA and TMG firewall administrators on the Internet, with over 500 articles on the ISA and TMG firewalls and over 50,000 registered users. He has worked as a technology trainer, writer, and consultant since 1996, and has provided consultative security guidance to Fortune 500 companies.
Comments about Microsoft Press Deploying Microsoft® Forefront® Unified Access Gateway 2010:
So what about this book? Top line, 138 pages in e-form, 5 chapters, and covers what UAG is, how to install UAG and then how to publish applications, SSL VPN and DirectAcess through it. It is that concise, but the devil is in the detail. While seeming small, it does cover a lot of the really detailed information you need to perform the tasks covered. There is a lot of detail on DirectAccess, even though the wizard does a lot of the hard work for you, they authors covers the recommendations for implementing this solution. If you've not looked at DirectAccess as an access solution for remote users I'd say it's worth a look. I use constantly and I think it is absolutely marvellous. Now having read chapter 5 in this guide, I have a good understanding of how UAG enhances the solution.
I saw a session at a User Group meeting on how to configure the Windows Server 2008 R2 implementation of Direct Access and that now seems very daunting compared to the UAG solution.
Enough on DirectAccess, the whole purpose of UAG is to provide an access solution that is secure, saleable and manageable. This book covers the details of how to get the product up and running, remember the title, "deploying", that covers how UAG provides the security and scalability portions, not the management. This publication, along with the other two, does not provide a complete guide to the products. In case of TMG, the administrators' companion goes into more detail, and the deploying guide references that book a lot. In UAG's case, there are pointers to more information on various TechNet pages and also Dr. Thomas Shinder's blog. If you do deploy UAG, then the Threat Management Gateway Administrators Companion could well be a good investment later. UAG installs TMG and while you manage TMG from within UAG, understanding what the features are and how to configure them will come up.
The other key area the book covers is around the applications UAG supports. The core of this is in chapter 3, which covers Exchange, Remote Desktop Services and SharePoint. The chapter mainly covers the wizards that implement the access through UAG; the assumption is that you have these services running already. This approach does highlight the ease with which it is possible to make these services available and granularity of control. Something, that while possible with TMG, is not as straightforward.
The later chapter on SSL VPN, follows a similar lines, there are good discussions on how UAG implements SSL VPN, and later one on the merits of DirectAccess versus SSL VPN. As with all the chapters there are step-by-step instructions for using the wizards. Size limits having step-by-steps for all scenarios, but the various are covered.
Who should invest in this? If you are primarily focused on getting up to speed on what UAG is and how it can be implemented into your organisation, then this is an ideal read. I myself thoroughly enjoyed reading it, and felt I learnt a lot about UAG. If you have UAG already, or someone else is deploying it, then you are better off reading isaserver.org or UAG on TechNet