
PDF File(348 kb)Deployment Scenarios: Microsoft TMG Standard (nTMG), TMG Enterprise (nTMGE), TMG Branch Office (nTMGB)series Appliances
Overview
TMG Server 2010 Appliance (nTMG or nTMGE Series) provides value to IT managers, network administrators, and information security professionals who are concerned about the security, performance, manageability, or reduced cost of network operations. TMG Server 2010 Appliance (nTMG or nTMGE Series) can help you:
- Defend Against External and Internal Web-Based Threats. TMG Server 2010 Appliance (nTMG or nTMGE Series) was engineered to deliver stronger security to manage and protect your networks.
- Securely Publish Content for Remote Access. TMG Server 2010 Appliance (nTMG or nTMGE Series) helps streamline the implementation providing security for corporate applications accessed over the Internet.
- Connect and Secure Branch Offices. TMG Server 2010 Appliance (nTMG or nTMGE Series) provides a robust way to securely expand corporate networks reducing network costs by leveraging existing network connections.
1. Defending Your Environment Against External and Internal Internet-Based Threats
Businesses need to eliminate the damaging effects of malware and attackers through a comprehensive set of tools for scanning and blocking harmful content, files, and Web sites. TMG Server 2010 Appliance (nTMG or nTMGE Series) can help organizations protect their environments from internally and externally originating Internet-based threats. With a hybrid proxy-firewall architecture, deep content inspection, granular policies, and comprehensive alerting and monitoring capabilities, TMG Server 2010 Appliance (nTMG or nTMGE Series) makes it easier to manage and protect your network. Read more about Internet Access Protection Internet Access Protection with TMG Server 2010 Appliance (nTMG or nTMGE Series).

Smaller Size Deployment (nTMG):

Medium-Large Size Deployment (nTMGE):
2. Securely Publishing Your Content for Remote Access
Businesses need to provide employees and partners with secure and appropriate remote access to applications, documents, and data from any PC or device.
TMG Server 2010 Appliance (nTMG or nTMGE Series) enables organizations to make their Exchange, SharePoint, and other Web application servers accessible in a more secure way to remote users outside the corporate network. By pre-authenticating users before they gain access to any published servers, inspecting even encrypted traffic at the application layer in a stateful manner, and providing automated publishing tools, TMG Server 2010 Appliance (nTMG or nTMGE Series) makes it easier to provide security for corporate applications accessed over the Internet. Read more about Secure Remote Access with TMG Server 2010 Appliance (nTMG or nTMGE Series).

Smaller Size Deployment (nTMG):

Medium-Large Size Deployment (nTMGE):

Medium-Large Size Deployment (Additional nUAG Appliance):
Note: UAG is a standalone appliance, it is not available as software add-on option with a nTMG or nTMGE as a single-appliance package (more)
3. Connecting and Securing Your Branch Offices
Businesses need to connect remote-site branch offices to their corporate headquarters, provide security-enhanced Internet access from branch offices and utilize limited bandwidth more efficiently.
Organizations can use TMG Server 2010 Appliance (nTMG or nTMGE Series) to connect to and secure their branch offices, while efficiently utilizing network bandwidth. By providing HTTP compression, caching of content (including software updates) and site-to-site virtual private network (VPN/IPSec) capabilities integrated with application-layer filtering, TMG Server 2010 Appliance (nTMG or nTMGE Series) makes it easier to securely expand corporate networks. Read more about Branch Office Security with TMG Server 2010 Appliance (nTMG or nTMGE Series).

Smaller Size Deployment (nTMG):

Medium-Large Size Deployment (nTMGE):
Compare nTMG, nTMGE and nTMGB Series Appliances
Review and Compare the different editions of Microsoft Threat Management Gateway (TMG) 2010
TMG 2010 provides robust, effective, and easy-to-use integrated security. Three versions are available: TMG Server 2010 Standard Edition (nTMG Series), TMG Server 2010 Enterprise Edition (nTMGE Series) and TMG Server 2010 Branch Office Edition (nTMGB Series).
The Following table compares and contrasts the key features of three editions.| Business Standalone | Corporate Datacenter | Corporate Branch Office | |
|---|---|---|---|
| Microsoft Forefront Threat Management Gateway 2010 | TMG Standard Edition | TMG Enterprise Edition | TMG Branch-Office Edition |
| Deployment Type: | |||
| Business Type | SMB | Enterprise | Branch Office |
| nAppliance Net-Gateway Platform Series | nTMG Series | nTMGE Series | nTMGB Series |
| Supported deployment scenarios | Standalone | Server in a standalone array or an array managed by EMS* | Server in a standalone array or an array managed by EMS* |
| High Availability: | |||
| NLB Arrays for Load Balancing & Failover | No | √ | √ |
| Scale Out: Number of Supported TMG Server in Array | 1 | Unlimited | 2 |
| Non-domain joined gateway | √ | √ | √ |
| ISP Link redundancy | √ | √ | √ |
| Unified Threat Management Functionalities: | |||
| Firewall - Stateful | √ | √ | √ |
| Firewall - Application Layer | |||
| Network IPS (NIS) | √ | √ | √ |
| VPN (site-to-site and remote access) | √ | √ | √ |
| Web Proxy | √ | √ | √ |
| Web Publishing | √ | √ | √ |
| HTTPS inspection | √ | √ | √ |
| Caching , Cache Compression | √ | √ | √ |
| NLB Arrays for CARP Support | √ | ||
| Web Anti-Malware Protection** | √ | √ | √ |
| E-mail Protection*** | √ | √ | √ |
| Configuration Storage Server (CSS) | |||
| Local Management of Firewall Policies and Config Settings | √ | √ | √ |
| Remote Management of Firewall Policies and Config Settings | √ | ||
| Enterprise Management: EMS for Centralized Management | |||
| Management of Enterprise (nTMGE) Edition Gateways | √ | ||
| Management of Branch (nTMGB) Edition Gateways* | √ | ||
| Management of Branch Standard (nTMG) Edition Gateway* | √ | ||
| Type of Microsoft Forefront TMG Editions | Standard | Enterprise (Datacenter) | Branch Office |
| Scale Up: Processor Support | Up to 4 CPU's | Unlimited | Up to 4 CPU's |
* Requires at least one Enterprise Edition nTMGE appliance license, EMS: Enterprise Management Server
** Requires subscription;
*** Requires Exchange License
- Section Name:

