nAppliance Networks Blog

Microsoft Forefront Edge Security Blogs

SharePoint publishing through TMG vs. UAG: Capabilities and Benefits

Posted Fri, 02/10/2012 - 16:54 by inder

Many of our customers wonder if it is better to use TMG or UAG for Sharepoint publishing, or whether either should be used at all. The answer, while not complex, involves some consideration of the relative capabilities and benefits of both pieces of software. In this post we will try to outline the key differences which will answer these questions. This post will give you a high level overview of the basic differences between the two.

We aren’t IPv6-ready yet, what do we need to deploy DirectAccess?

Posted Sun, 02/05/2012 - 10:50 by inder

Every IT manager, when deciding on a strategy for deploying DirectAccess for their corporate users, has the following questions on their mind about IPv6:

When you have no excuse to not deploy Microsoft DirectAccess

Posted Sat, 01/28/2012 - 15:14 by inder

As we have described in a previous blog post, Microsoft DirectAccess has many benefits over traditional VPN: http://www.nappliance.com/blog/nappliance-nuag-and-directaccess-better-together.

What role does DNS64 and NAT64 play in UAG Direct Access?

Posted Thu, 01/19/2012 - 17:28 by inder

By now, most of us know what DirectAccess is. For those who don’t, Direct Access is a revolutionary VPN technology which was introduced in Windows Server 2008 R2. It provides seamless connectivity to corporate resources without requiring any dial-up or VPN. DirectAccess connectivity is based on IPsec, IPV6, and transition technologies like Teredo, 6to4, IP-HTTPS, and ISATAP. In DirectAccess, the IPv6 traffic is encapsulated in an IPv4 packet and is then sent across the internet, after which the DirectAccess server reads the IPv6 headers and executes it.

Best practices when deploying TMG URL Filtering

Posted Fri, 01/13/2012 - 18:33 by inder

Microsoft Threat Management Gateway 2010 brings a lot of new and enhanced features to edge network security. Ever since Microsoft started with Proxy Server 2.0, and then ISA Server, URL filtering has always been something which administrators have wanted. Every company has their own IT policies and most companies want to restrict their users from visiting inappropriate or unsafe websites during their office hours from company-owned machines.

Why is UAG DirectAccess better than traditional VPN?

Posted Thu, 01/05/2012 - 16:00 by inder

In our previous post at http://www.nappliance.com/blog/nappliance-nuag-and-directaccess-better-together we highlighted how UAG and DirectAccess are better together and the benefits of connecting through the DirectAccess. In this post we will concentrate on the advantages DirectAccess has over the traditional VPN connectivity and why companies would want to move away from the VPN infrastructure.

UAG 2010: Error "Unknown error 0xc00000403" when adding UAG machine to a Array

Posted Wed, 04/06/2011 - 12:30 by inder


You may encounter the following error while joining an array member to a UAG array.

 

UAG 2010: Error "Applying Network Access Protection configuration failed"

Posted Wed, 04/06/2011 - 12:19 by inder

 

Problem:

When trying to activate the configuration on a UAG server, you might find that the activation failed and you can see the following error messages in the status window:

Error: Applying Network Access Protection configuration failed.

Error: The UAG DirectAccess configuration cannot be activated

UAG 2010: Error "An unknown error occurred while processing the certificate. Contact the site administrator"

Posted Wed, 04/06/2011 - 11:58 by inder

A client that is trying to access an SSL enabled application on a backend server (e.g. Exchange) that is published through the Forefront UAG portal gets an error, specifically:

“An unknown error occurred while processing the certificate. Contact the site administrator”.

The cause:

UAG 2010 RTM: Integrating NAP Policies

Posted Mon, 11/01/2010 - 12:11 by inder

Microsoft UAG 2010 can be integrated with Windows NAP (Network Access Protection) to make sure that the computers comply with the IT policies before user’s login into the UAG portal. Windows Network Access Protection is part of Windows 2008 and 2008 R2 servers. No extra hardware or licensing is required to implement Microsoft NAP in an environment. Moreover, there are simple settings in UAG for integrating NAP to do policy enforcement.

Syndicate content