Microsoft Gold-Certified Consulting
Forefront Threat Management Gateway Help:
Consulting, Integration, Problem Solving
Overview of Microsoft Forefront Threat Management Gateway 2010
Microsoft offers a broad selection of security products and services within the Forefront family. Forefront Threat Management Gateway (TMG) 2010 builds on the proven security technologies of ISA Server 2006, which it is designed to replace and for which it includes downgrade rights. TMG 2010 runs on a 64-bit server and provides a centrally managed Internet gateway that offers a single-server solution for a variety of security functions including an application layer and network layer firewall, URL filtering, malware inspection, reputation services, intrusion protection (IP), application proxy, VPN management, and HTTP/HTTPS inspection. TMG provides comprehensive web security logging and reporting capabilities, allows custom reporting powered by Microsoft SQL Server, integrates with Active Directory to simplify authentication and policy enforcement, and can be deployed as a virtual machine to cut costs and improve availability.
Microsoft has discontinued Forefront TMG 2010. The firewall capabilities offered by the product are commonly handled by hardware appliances from providers like Cisco, Barracuda, Check Point and WatchGuard. (Visit Cisco ASA firewalls with Firepower Services consulting.) Progent's firewall integration consultants can help you maintain and troubleshoot your Forefront TMG 2010 environment or help migrate to a modern solution. If you decide to upgrade, Progent can help you design and implement an efficient migration, integrate your on-premises firewall solution with cloud-based resources, train your IT staff, and provide as-needed expertise.
Progent's Microsoft-certified consultants can help you evaluate the business case for TMG 2010 in your environment; plan and carry out test and production deployments; integrate Forefront TMG 2010 with Windows 2008, Active Directory, SQL Server, Exchange Server 2010, and SharePoint 2010; set up TMG 2010 to run on a virtual machine with Windows Hyper-V; assist you to create custom reports; train your IT management staff; and provide ongoing consulting and troubleshooting support. Progent can also help you migrate smoothly and economically to Forefront TMG 2010 from ISA Server 2006 or ISA Server 2004 so you maximize your return on investment in Microsoft's Forefront technology.
Enhancements of Forefront Threat Management Gateway over Microsoft ISA Server 2006
Forefront Threat Management Gateway 2010 builds on the protection technology incorporated in ISA Server 2006 and offers significant improvements over the platform it replaces. TMG 2010 provides a secure web gateway for protecting users within the security perimeter from web-based threats by integrating anti-virus, anti-phishing, and anti-malware technology with advanced URL filtering and by extending these protections to SSL-encrypted traffic through HTTPS inspection. The powerful Network Inspection System (NIS) integrated with Forefront TMG 2010 is a signature-based network Intrusion Prevention System (IPS) that can provide continually updated application-layer protection for vulnerabilities discovered in Microsoft products and protocols.
TMG 2010 offers improved connectivity through the ability designate email servers to be published on a 1-to-1 NAT basis. Through its new ability to recognize SIP traffic and provide a method to traverse the firewall, Forefront TMG 2010 simplifies the implementation of Voice-over-IP solutions within the network. Support for ISP redundancy enhances availability and facilitates disaster recovery. In the area of VPN connectivity, TMG 2010 can be configured for tunnel-mode IPsec for compatibility with third-party devices, provides termination of L2TP/IPsec and PPTP-VPN sessions using native Windows VPN services, and can be used to publish internal Windows Servers as VPN servers.
The Enterprise Edition of Forefront Threat Management Gateway 2010 delivers improved expandability, availability, speed, management, and virtualization. This high-end edition supports network load balancing and Cache Array Routing Protocol (CARP) to provide fail over and enhance performance, allows access to Microsoft's Enterprise Management Console for centralized administration, and accommodates unlimited virtual CPUs.
The SP1 version of Forefront Threat Management Gateway introduces additional features and enhancements including a new User Activity report that displays web surfing data over a specified period based on websites and URL categories users have requested, simplified deployment of BranchCache at a remote office by using Forefront TMG as the Hosted Cache server when installed on a computer running Windows Server 2008 R2, the ability to run Forefront TMG and a read-only domain controller on the same server to save on IT costs at a branch office, and support for the securely publishing SharePoint 2010.
Network Inspection System for Enhanced Application Layer Inspection
A key part of Forefront TMG's IPS architecture is the Network Inspection System (NIS), a traffic analysis solution based on protocol decoding that uses signatures of known vulnerabilities to detect and block attacks and exploits aimed at Microsoft operating systems and applications. NIS involves a combination of services and software designed to reduce the time gap between when a network-based vulnerability is first discovered by Microsoft and when protective patches are installed on customers' production systems. Ordinarily, this gap can be measured in weeks. NIS can often reduce it to hours, providing zero-day response.
The protection strategy of NIS is based on signatures, code that detects attempts embedded within various network protocols to carry out attacks, as opposed to file-based attacks. Protocols commonly used as attack vectors which NIS can intercept include HTTP, DNS, SMB, SMB2, NetBIOS, and MSRPC, as well as the common email protocols SMTP, POP3, IMAP and MIME. NIS security begins with the Microsoft Malware Protection Center (MMPC). This organization has research facilities in five countries on three continents and works 24 hours a day monitoring global malware trends by analyzing data collected from a broad array of sources, including 600 million Windows computers. The MMPC, which also publishes responses to file-based threats for use by the malware inspection feature of Forefront TMG, develops and distributes the signature definitions used by NIS to defend against network-based attacks.
When a new vulnerability or exploit surfaces, MMPC researchers develop and test a signature which the MMPC response team publishes for efficient distribution via Microsoft Update Service. Forefront TMG can be configured to download and install all new signatures automatically, or the signature library can be updated manually and selectively. You can also select which protocols you want TMG to monitor if, for example, you don't want to waste bandwidth testing for protocols that are already blocked. The NIS feature, including access to updates, is included with the basic Forefront TMG license.
How Progent Can Help You with Forefront Threat Management Gateway 2010
In the field of firewalls and IT security policy, there is always a tradeoff between protection and productivity. Progent's Microsoft engineers and certified security consultants can show you to find the appropriate balance for your environment and can help you configure Forefront Threat Management Gateway 2010 to maximize the business value of your security infrastructure.
Progent can help you design, test, and implement a first-time installation of Microsoft's firewall and IPS technology or upgrade cost-effectively to Forefront TMG 2010 from ISA Server 2006 or ISA Server 2004. Progent can help you interface TMG with Microsoft SQL Server for customized web security reporting, with Exchange Server for secure access via the full MAPI Outlook client without requiring VPN, with SharePoint 2010 for secure publishing, and with Active Directory for consistent authentication and policy enforcement. Progent's Windows Hyper-V experts can help you save money and increase reliability by deploying Forefront TMG 2010 as a virtual server, and Progent's disaster recovery engineers can show you how to take advantage of TMG's network load balancing support to maximize availability.
Progent's certified network security engineers can help you create a company-wide security solution that includes business continuity planning and network security vulnerability scanning. Progent's Microsoft System Center Operations Manager (SCOM) consultants can help you monitor your network proactively to spot and remediate issues before they grow into serious problems. Progent offers the services of one of the country's largest teams of Cisco CCIE network engineers who can provide affordable online expertise to help you build a secure and responsive network infrastructure and to troubleshoot complex problems with Cisco appliances or software. Progent can also provide webinar training to help your IT staff get up to speed quickly with Forefront TMG 2010. Because Progent specializes in delivering advanced consulting and troubleshooting services online, Progent can help you minimize support costs and speed up the completion of IT projects and repairs.
Contact Progent for Microsoft Forefront Threat Management Gateway 2010 Solutions
If you need help with Forefront TMG 2010, call
Progent's Consulting and Support Services for Microsoft Server Products
For small businesses anywhere in the U.S., Progent's Microsoft-authorized consultants offer computer help and IT consulting support for the entire family of Microsoft .NET Enterprise Servers and Microsoft Windows Servers. Progent's planning, integration, update, and consulting capabilities include network architecture, configuration, and administration outsourcing for
project analysis and documentation, local and remote
IT help and network diagnosis,
Standard Help Desk Services or Co-managed Help Desk Services, comprehensive
security consulting, full-service
outsourcing, and
ProSight Virtual Hosting services.
In case your organization needs fast remote help from a certified consultant, refer to Progent's Urgent Online Technical Help.
Read additional information about Progent's Support Services for Microsoft .NET Server Technology.
An index of content::
Part Time Job Microsoft MCSE
Contract Job Opportunities Microsoft MCSE
If you are an information technology consultant with system support expertise, joining Progent and assisting Progent's clients will expand your abilities through interaction with our staff of motivated, world-class consulting experts. Progent's commitment to providing IT consulting and computer support to small and midsize businesses will offer you the chance to consult in depth with business leaders and contribute tangibly to the success of dynamic organizations. In addition, Progent's virtual office environment provides the most advanced tools for remote service and wireless access to help you to deliver fast fixes when you troubleshoot mission-critical issues.
24-Hour Symantec VPN Information systems Security Outsourcing
Largest Symantec Raptor Intrusion Detection
Progent's Symantec experts can help you support legacy Symantec firewall and Symantec VPN products such as the Symantec Raptor and Symantec VelociRaptor family or show you how to migrate to newer firewall/VPN technology. Progent can also enable you to design and execute a complete security plan that can incorporate firewall/VPN devices and utilities, managed security and network defense services, server and application monitoring products, and formal policies and enforcement procedures. Progent has the skill to be your one-stop resource for on-going technical help, administration, education, and security consulting.
ransomware vulnerability evaluation Professional
ransomware protection Specialists
Progent's ProSight Ransomware Preparedness Report is an affordable service built around a brief phone discussion with a Progent information assurance expert. The fact-finding interview is designed to help assess your company's preparedness to block ransomware or recover rapidly after a ransomware incident. Progent will consult with you personally to gather information about your current security profile and backup procedures, and Progent will then produce a written Basic Security and Best Practices Report describing how you can apply best practices to create a cost-effective AV and backup/recovery system that minimizes your vulnerability to a ransomware attack and meets your business needs.
Small Business Network Consulting Services NetBSD
Linux Services
Progent's UNIX platform consulting services offer small businesses and developers help with administering and maintaining UNIX, Linux or Solaris environments that coexist with Microsoft-powered technology. Progent can give your organization access to UNIX experts, support professionals certified by Microsoft and Cisco, and security specialists with CISM certification. This broad range of expertise offers you a convenient single source to help you build and maintain a secure and robust mixed-platform network and communications infrastructure that supports UNIX and Microsoft coexistence by integrating Windows with popular variants of UNIX such as Apple macOS and OS X, Sun Solaris, AIX, HP-UX, Berkeley UNIX (BSD), SCO and SGI/Irix or major Linux platforms including RedHat, SuSE Linux, Debian GNU/Linux and Slackware.
Online Support Microsoft SMS
Systems Management Server 2003 Remote Support
Progent's Microsoft certified experts provide small and mid-size businesses world-class consulting services for Microsoft Systems Management Server 2003. Systems Management Server is Microsoft's solution for change and configuration management. SMS 2003, included in Microsoft System Center 200, enables you to install critical software quickly and automatically to specified workers, reduce product expense and adhere to licensing agreements by determining patterns of usage, improve Windows security by improving your knowledge of vulnerability and by delivering critical updates, manage your external workforce through accepted standards independent of connection or geography, and lower operational expenses by efficiently utilizing the administrative capabilities incorporated into Windows. Progent's SMS consulting professionals can show you how to use SMS effectively for automated software and application deployment, security patch control, and resource monitoring management including program and appliance inventory.
ProSight IT documentation management Consulting
Technology Professional domain management
ProSight IT Asset Management is a cloud-based IT documentation management service that makes it easy to capture, update, retrieve and protect data about your network infrastructure, processes, business apps, and services. You can quickly locate passwords or IP addresses and be alerted automatically about upcoming expirations of SSLs or warranties. By cleaning up and managing your IT documentation, you can eliminate as much as 50% of time wasted searching for vital information about your IT network. ProSight IT Asset Management includes a centralized location for holding and sharing all documents required for managing your network infrastructure such as standard operating procedures and self-service instructions. ProSight IT Asset Management also supports a high level of automation for collecting and associating IT data. Whether you're making enhancements, doing maintenance, or reacting to an emergency, ProSight IT Asset Management delivers the knowledge you need as soon as you need it.
Palo Alto Networks Security Consultancy
Security Contractor Palo Alto Networks PAN-OS
Progent's Palo Alto Networks firewall consultants can show you how to choose, configure, and manage Palo Alto Networks firewalls to provide a next-generation security ecosystem that spans your data center and cloud-based resources and guards all users anywhere with any endpoint device.
Select Topic: