This article relies on references to primary sources or sources affiliated with the subject. Please add citations from reliable and independent sources. (February 2011)

Microsoft Forefront Threat Management Gateway 2010

Microsoft Forefront Threat Management Gateway 2010 management console
Developer(s)	Microsoft
Initial release	1 January 1997 (1997-01-01)
Stable release	2010 / 17 November 2009; 2 years ago (2009-11-17)[1]
Operating system	Windows Server 2008
Platform	x86-64
Translation available	English, Chinese (Simplified), Chinese (Traditional), French, German, Italian, Japanese, Korean, Portuguese (Brazil), Russian and Spanish[2]
Type	Router Firewall Antivirus VPN Server Web cache
License	Proprietary commercial software
Website	www.microsoft.com/tmg

Microsoft Forefront Threat Management Gateway (Forefront TMG), formerly known as Microsoft Internet Security and Acceleration Server (ISA Server), is a network security and protection solution for Microsoft Windows, described by Microsoft as "enables businesses by allowing employees to safely and productively use the Internet for business without worrying about malware and other threats".^[3]

  Features

Microsoft Forefront TMG offers a set of features which include:^[4]

1. Routing and remote access features: Microsoft Forefront TMG can act as a router, an Internet gateway, a virtual private network (VPN) server, a network address translation (NAT) server and a proxy server.
2. Security features: Microsoft Forefront TMG is a firewall which can inspect network traffic (including web contents, secure web contents and emails) and filter out malware, attempts to exploit security vulnerabilities and content that does not match a predefined security policy. In technical sense, Microsoft Forefront TMG offers application layer protection, stateful filtering, content filtering and anti-malware protection.
3. Network performance features: Microsoft Forefront TMG can also improve network performance: It can compress web traffic to improve communication speed. It also offers web caching: It can cache frequently-accessed web contents so that users can access them faster from the local network cache. Microsoft Forefront TMG 2010 can also cache data received through Background Intelligent Transfer Service, such as updates of software published on Microsoft Update website.

  History

  Microsoft Proxy Server

The Microsoft Forefront Threat Management Gateway product line originated with Microsoft Proxy Server. Developed under the code-name "Catapult",^[5] Microsoft Proxy Server v1.0 was first launched in January 1997,^[6] and was designed to run on Windows NT 4.0. Microsoft Proxy Server v1.0 was a basic product designed to provide Internet Access for clients in a LAN Environment via TCP/IP. Support was also provided for IPX/SPX networks (primarily used in legacy Novell NetWare environments), through a WinSock translation/tunnelling client which allowed TCP/IP applications, such as web browsers, to operate transparently without any TCP/IP on the wire. Although well-integrated into Windows NT4,^[7] Microsoft Proxy Server v1.0 only had basic functionality, and came in only one edition. Extended support for Microsoft Proxy Server v1.0 ended on 31 March 2002.^[6]

Microsoft Proxy Server v2.0 was launched in December 1997,^[8] and included better NT Account Integration, improved packet filtering support, and support for a wider range of network protocols. Microsoft Proxy Server v2.0 exited the extended support phase and reached end of life on 31 December 2004.^[8]

  ISA Server 2000

On 18 March 2001, Microsoft launched Microsoft Internet Security and Acceleration Server 2000 (ISA Server 2000).^[9] ISA Server 2000 introduced the Standard and Enterprise editions, with Enterprise-grade functionality such as High-Availability Clustering not included in the Standard Edition. ISA Server 2000 required Windows 2000 (any edition), and will also run on Windows Server 2003. In accordance with Microsoft's Support Lifecycle Policy, ISA Server 2000 was the first ISA Server product to use the 10 year support lifecycle with 5 years of Mainstream support and five years of Extended support. ISA Server 2000 reached End of Life on 12 April 2011.^[9]

  ISA Server 2004

Microsoft Internet Security and Acceleration Server 2004 (ISA Server 2004) was released on the 8 September 2004.^[10] ISA Server 2004 introduced multi-networking support^{[clarification needed]}, integrated virtual private networking configuration, extensible user and authentication models, application layer firewall support, Active Directory integration, SecureNAT^{[clarification needed]}, and improved reporting and management features. The rules based configuration was also considerably simplified over ISA Server 2000 version.

ISA Server 2004 Enterprise Edition included array support, integrated Network Load Balancing (NLB), and Cache Array Routing Protocol (CARP). One of the core capabilities of ISA Server 2004, dubbed Secure Server Publishing, was its ability to securely expose their internal servers to Internet. For example, some organizations use ISA Server 2004 to publish their Microsoft Exchange Server services such as Outlook Web Access (OWA), Outlook Mobile Access (OMA) or ActiveSync. Using the Forms-based Authentication (FBA) authentication type, ISA Server can be used to pre-authenticate web clients so that traffic from unauthenticated clients to published servers is not allowed.

ISA Server 2004 is available in two editions, Standard and Enterprise. Enterprise Edition contains features enabling policies to be configured on an array level, rather than on individual ISA Servers, and load-balancing across multiple ISA Servers. Each edition of ISA Server is licensed per processor. (The version included in Windows Small Business Server 2000/2003 Premium includes licensing for 2 processors.)

ISA Server 2004 runs on Windows Server 2003 Standard or Enterprise Edition. Appliance hardware containing Windows Server 2003 Appliance Edition and ISA Server Standard Edition is available from a variety of Microsoft Partners.^[11]

  ISA Server 2006

This section requires expansion. (March 2010)

Microsoft Internet Security and Acceleration Server 2006 (ISA Server 2006) was released on 17 October 2006.^[12] It is an updated version of ISA Server 2004, and retains all features from ISA Server 2004 except Message Screener.

  ISA Server Appliance Edition

Microsoft also offers ISA Server 2006 Appliance Edition, software designed to be pre-installed onto an OEM hardware^{[clarification needed]} that is sold by the hardware manufacturer as a stand alone firewall type device.^[13]

  Microsoft Forefront TMG MBE

Microsoft Forefront Threat Management Gateway Medium Business Edition (Forefront TMG MBE) is the next version of ISA Server which is also included with Windows Essential Business Server. This version only runs on the 64-bit edition of Windows Server 2008 and does not support Enterpise edition features such as array support or Enterprise policy.

  Microsoft Forefront TMG 2010

Microsoft Forefront Threat Management Gateway 2010 (Forefront TMG 2010) was released on 17 November 2009.^[1] It is built on the foundation of ISA Server 2006 and provides enhanced web protection, native 64-bit support, support for Windows Server 2008 and Windows Server 2008 R2, malware protection and BITS caching. Service Pack 1 for this product was released on 23 June 2010.^[14] It includes several new features to support Windows Server 2008 R2 and Microsoft SharePoint 2010 lines of products.^[15] Service Pack 2 for this product was released on 10 October 2011.^[16]

  See also

• Microsoft Servers
• Microsoft Forefront
• Microsoft Forefront Unified Access Gateway

  References

Microsoft Forefront TMG Administratator's Companion Book by Microsoft Press.

  External links

• Official website
• TMG TechCenter
• TMG product documentation
• Microsoft Forefront Threat Management Gateway 2010 download
• Forefront TMG (ISA Server) Product Team Blog
• Forefront TMG information and articles in french on a Microsoftee's blog
• Richard Hicks' Forefront TMG Blog