Microsoft Forefront TMG (Threat Management Gateway)

Forefront TMG is the complete solution for security in network allowing to protect employees from threats from the Internet. Besides, Forefront TMG offers an easy uniform way of security of perimeter thanks to the integrated firewall, VPN, an intrusion prevention, verification of presence of malware and filtering of the URL addresses.

Features

The Forefront TMG server expands the opportunities given by the Microsoft Internet Security and Acceleration Server (ISA) server and performs functions of the comprehensive integrated gateway ensuring network security. The main improvements of Forefront TMG provide additional opportunities of protection of corporate networks against external threats from the Internet.

Functions

• Protection against harmful Internet programs is provided by service of a subscription to web protection of Forefront TMG. Means of protecting from harmful Internet programs check web pages for presence of viruses, malware and other threats.

• Filtering of the URL addresses permits or prohibits access to websites, based on categories of the URL addresses (for example, a pornography, drugs, promotion of violence or trade). The organizations can not only protect employees from visit of the websites with the known malware, but also warn a labor productivity decline, limiting or blocking access to the websites which can distract attention of employees. Filtering of the URL addresses is also provided by service of a subscription to web protection.

• The service of a subscription to protection of e-mail — Forefront TMG provides service of a subscription to protection of e-mail on the basis of the technology integrated from Forefront Protection 2010 for Exchange Server. Forefront TMG works as a repeater of SMTP traffic and checks e-mail for presence of viruses, malware, undesirable mail and specific contents (for example, the executed or ciphered files) when they pass through network.

• Check of HTTPS provides check of sessions with enciphering of HTTPS on availability of malware or attempts of use of vulnerabilities. Separate groups of the websites, for example the websites of banks, can be excluded from check for reasons of preserving of confidentiality. Users of the client of Forefront TMG Client can be notified on check.

• The system of check of network (NIS) provides check of traffic on existence of attempts of use of vulnerabilities of programs of Microsoft corporation. On the basis of the analysis of the protocol the system of check of network is capable to block certain categories of the attacks at the minimum quantity of false operations. In need of means of protecting can be updated.

• Expanded network address translation (NAT) allows to specify separate servers of e-mail which can be published on the basis of network address translation in the relation one to one.

• Expanded support of the VoIP protocol provides a possibility of a bypass of the SIP protocol that simplifies deployment of service VoIP in network.

• Windows Server 2008 with support of 64-bit architecture — Forefront TMG is installed on Windows Server 2008 with support of 64-bit architecture.

Citrix NetScaler is replacement for Microsoft Forefront TMG

For replacement unrolled by Microsoft Forefront TMG within specific scenarios of use the solutions Citrix NetScaler are proposed: