Microsoft Forefront Unified Access Gateway

Unified Access Gateway
Original author(s) Whale Communications
Developer(s) Microsoft
Stable release
2010 with SP4 / 27 November 2013 (2013-11-27)[1]
Development status Discontinued
Operating system Windows Server 2008 R2[2]
Platform x86-64[2]
Type Reverse proxy, virtual private network
License Trialware[3]
Website www.microsoft.com/uag
Minimum system requirements[2]
CPU 2.66 GHz; dual core; x86-64-compatible
Memory 4 GB
Hard disk drive space 2.5 GB
Operating system Windows Server 2008 R2 Standard or Enterprise edition
Other requirements The computer on which Forefront UAG is being installed should be devoid of all other software except its operating system.

Microsoft Forefront Unified Access Gateway (UAG), is a computer software solution that provides secure remote access to corporate networks for remote employees and business partners. It incorporates remote access technologies such as reverse proxy, virtual private network (VPN), DirectAccess and Remote Desktop Services. UAG was released in 2010, and is the successor for Microsoft Intelligent Application Gateway (IAG) which was released in 2007. UAG is part of the Microsoft Forefront offering. Microsoft is ending mainstream support for UAG in 2015. It is being replaced in part by the Windows Server 2012 R2 feature Web Application Proxy.

History

Unified Access Gateway was originally developed by a startup company named Whale Communications in Rosh HaAyin, Israel. One of the challenges it tried to solve in the 1990s was to develop a remote access solution based on a VPN mechanism but without direct network access from the remote client to the corporate network.[4] This type of solution was specifically required by the Israeli military and government, to meet national information security standards.

The technology developed was called the Air Gap and the communication between the external network and internal network was managed by two separate 1U rack-mount servers linked together by a memory bank accessed through a SCSI interface.[5]

On 18 May 2006, Microsoft announced that it would be acquiring Whale Communications.[6] Microsoft completed the acquisition on 26 July 2006.[7][8] Following this acquisition, the product was renamed Microsoft Intelligent Application Gateway Server 2007. With this version, the SCSI-based Air Gap was dropped, and the product was unified as a single-server appliance. Instead of using the Air Gap as the security barrier, IAG used Microsoft's ISA Server firewall product. IAG was offered to the public as a pre-installed appliance by Celestix Networks, IVO Networks, PortSys and nAppliance. In 2009, with the release of Service Pack 2 for IAG, the product was also offered directly to the public from Microsoft in the form of a virtual appliance - a pre-installed VHD which could be run on Hyper-V or VMware Workstation.

In April 2008, Microsoft announced that the next generation of IAG will be named Forefront Unified Access Gateway. The product was released on 24 December 2009.[9] Service Pack 1 for this product was released on 3 December 2010.[10] Update 1 for Service Pack 1 was released on 17 October 2011[11] Service Pack 2 for this product was released on 6 August 2011.[12] Service Pack 3 was released on 19 February 2013.[13] Service Pack 4 was released on 27 November 2013.[1] On 17 December Microsoft have announced that Microsoft will not deliver any future full version releases of Forefront UAG and the product will be removed from price lists on 1 July 2014[14]

Technical overview

Microsoft UAG provides secure socket layer (SSL) virtual private network (VPN), a Web application firewall, and endpoint security management (for compliance and security) that enable access control, authorization, and content inspection for a wide variety of line-of-business applications.

Included are customized granular access policy and security capabilities for Microsoft Exchange Server (2003, 2007 and 2010), Microsoft SharePoint Portal Server (2003, 2007 and 2010), Microsoft Terminal Services and Citrix Presentation Server. The product is highly customizable, and almost any application can be published With UAG.[15]

Out of the box UAG Server is able to work with many authentication vendors such as Mi-Token, RSA Security, VASCO Data Security International, Inc., GrIDsure, Swivel, ActivCard and Aladdin. It also works with numerous authentication systems and protocols such as Active Directory, RADIUS, LDAP, NTLM, Lotus Domino, PKI and TACACS+. Possible customizations include single-sign-on (SSO), as well as look-and-feel dynamic customization. With the current release of UAG with Update 2, the product also offers support for many third-party systems such as Linux, Macintosh and iPhone. The product also supports Mozilla Firefox.

UAG performs particularly well in providing a portal for web applications, such as web-based email and intranets, but it also provides full SSL VPN network access using either ActiveX (when using Internet Explorer) or Java components (when using Firefox, Opera, non Windows client such as Red Hat or Mac OS). These components can also perform end-point compliance checks before allowing access, to test for attributes on the PC such as domain name, antivirus definitions date or running processes.

The inclusion of DirectAccess with UAG has been a big influence on its success, as DirectAccess provides a very seamless VPN-like integration and is in high-demand by many organizations. DirectAccess is part of Windows, but UAG provides a very user-friendly configuration interface for it, making it easier to configure for administrators. UAG also adds two additional components - DNS64 and NAT64, which make deploying DirectAccess in an existing network easier, without the need to deploy IPv6.[16]

The product is sold in appliance form, from vendors such as IVO Networks, PortSys, Celestix Networks, and nAppliance. It is also offered as an installable DVD. The product can be installed on Windows Server 2008 R2.[17]

Version History

Version Release date Version number Reference
General availability 25 January 2010 4.0.1101.0 N/A
Sec Update MS10-089 9 Nov 2010 4.0.1101.052 [18]
Update 1 12 April 2010 4.0.1152.100 [19]
U1 Rollup 1 18 May 2010 4.0.1152.110 [20]
U1+Sec Update MS10-089 9 Nov 2010 4.0.1152.150 [21]
Update 2 21 September 2010 4.0.1269.200 [22]
U2+Sec Update MS10-089 9 Nov 2010 4.0.1269.250 [23]
Service Pack 1 RC 21 October 2010 4.0.1575.10000 ?
Service Pack 1 14 January 2011 4.0.1752.10000 [24]
Service Pack 1 Rollup 1 3 February 2011 4.0.1752.10020 [25]
Service Pack 1 Rollup 2 (a.k.a. Q1 2011 Rollup) 6 April 2011 4.0.1752.10025 ?
Security Update MS11-079 12 October 2011 4.0.1752.10073 [26]
SP1 + Sec Update MS12-026 10 April 2012 4.0.1753.10076 [27]
Service Pack 1 Update 1 13 October 2011 4.0.1773.10100 [28]
Service Pack 1 Update 1 Rollup 1 11 January 2012 4.0.1773.10110 [29]
SP1 U1 + Sec Update MS12-026 10 April 2012 4.0.1773.10190 [30]
Service Pack 1 Update 1 Rollup 2 12 June 2012 4.0.1773.10220 ?
Service Pack 2 6 August 2012 4.0.2095.10000 [31]
Service Pack 3 20 February 2013 4.0.3123.10000 [32]
Service Pack 3 Rollup 1 15 April 2013 4.0.3206.10100 [33]
Service Pack 4 27 November 2013 4.0.4083.10000 [34]
Service Pack 4 Rollup 1 28 October 2014 4.0.4160.10100 [35]
Service Pack 4 Rollup 2 19 June 2015 4.0.4205.10200 [36]

See also

References

  1. 1 2 "Forefront Unified Access Gateway (UAG) Service Pack 4 (SP4)". Microsoft Download Center. Microsoft corporation. 27 November 2013. Version: v4.0.4083.10000[~] Date Published: 11/27/2013
  2. 1 2 3 "System Requirements For Forefront UAG Servers". Microsoft Forefront website. Microsoft corporation. Retrieved 24 July 2010.
  3. ↑ "Download Microsoft Forefront Unified Access Gateway 2010 SP1". TechNet Evaluation Center. Microsoft. Retrieved 28 January 2013.
  4. ↑ "Microsoft Lands Whale for VPN Tech". eWeek. New York, NY: Ziff Davies. 18 May 2006. Retrieved 3 December 2010.
  5. ↑ Kaven, Oliver (19 August 2003). "Whale e-Gap 3900". PC Magazine. New York, NY: Ziff Davies. Retrieved 3 December 2010.
  6. ↑ "Microsoft to Acquire Whale Communications, a Leading Provider of SSL VPN and Application Security Technologies". Microsoft News Center. Redmond, WA: Microsoft Corporation. 18 May 2006. Retrieved 24 July 2010.
  7. ↑ "Microsoft Completes Acquisition of Secure Remote Access Technology Leader Whale Communications". Microsoft News Center. Redmond, WA: Microsoft Corporation. 26 July 2006. Retrieved 24 July 2010.
  8. ↑ "Microsoft Corp acquires Whale Communications Ltd". Thomson Financial. 26 July 2006. Retrieved 31 October 2008.
  9. ↑ "Forefront Unified Access Gateway (UAG) 2010 is released!". Microsoft Forefront Unified Access Gateway Product Team Blog. MSDN Blogs (Microsoft corporation). 24 December 2009. Retrieved 24 July 2010.
  10. ↑ "Download details: Forefront Unified Access Gateway (UAG) Service Pack 1". Microsoft Download Center. Microsoft corporation. 3 December 2010. Retrieved 3 December 2010. Version: 4.0.1752.10000 [~] Date Published: 12/3/2010
  11. ↑ "Forefront Unified Access Gateway (UAG) Service Pack 1 (SP1) Update 1". Microsoft Download Center. Microsoft corporation. 17 October 2011. Retrieved 17 October 2011. Version: 4.0.1773.10100[~] Date Published: 10/17/2011
  12. ↑ "Download details: Forefront Unified Access Gateway (UAG) Service Pack 2". Microsoft Download Center. Microsoft corporation. 6 August 2011. Retrieved 27 December 2012. Version: 4.0.2095.10000 [~] Date Published: 8/6/2011
  13. ↑ "Forefront Unified Access Gateway (UAG) Service Pack 3 (SP3)". Microsoft Download Center. Microsoft corporation. 19 February 2013. Retrieved 30 March 2013. Version: v4.0.3123.10000[~] Date Published: 2/19/2013
  14. ↑ http://blogs.technet.com/b/server-cloud/archive/2013/12/17/important-changes-to-the-forefront-product-line.aspx
  15. ↑ "Microsoft delivers feature-rich SSL-VPN". Compouterworld. Newtonville, Massachusetts: International Data Group. 8 March 2010. Retrieved 3 December 2010.
  16. ↑ "Microsoft Forefront UAG 2010 Makes DirectAccess Feasible". eWeek. New York, NY: Ziff Davies. 10 February 2010. Retrieved 3 December 2010.
  17. ↑ "Hardware Partners". Forefront UAG. Microsoft corporation. 3 December 2010. Retrieved 3 December 2010.
  18. ↑ "MS10-089: Description of the security update for Forefront Unified Access Gateway 2010: November 9, 2010". Support. Microsoft.
  19. ↑ "Description of Update 1 for Unified Access Gateway 2010". Support. Microsoft.
  20. ↑ "Description of the Rollup 1 hotfix package for Unified Access Gateway 2010 Update 1". Support. Microsoft.
  21. ↑ "MS10-089: Description of the security update for Forefront Unified Access Gateway 2010 Update 1: November 9, 2010". Support. Microsoft.
  22. ↑ "Description of Update 2 for Unified Access Gateway 2010". Support. Microsoft.
  23. ↑ "MS10-089: Description of the security update for Forefront Unified Access Gateway 2010 Update 2: November 9, 2010". Support. Microsoft.
  24. ↑ "Description of Forefront Unified Access Gateway 2010 Service Pack 1 (SP1)". Support. Microsoft.
  25. ↑ "Description of the Service Pack 1 Rollup 1 hotfix package for Unified Access Gateway 2010". Support. Microsoft.
  26. ↑ "MS11-079: Description of the security update for Unified Access Gateway 2010 Service Pack 1: October 11, 2011". Support. Microsoft.
  27. ↑ "MS12-026: Description of the security update for Microsoft Forefront Unified Access Gateway 2010 Service Pack 1: April 10, 2012". Support. Microsoft.
  28. ↑ "Description of the Service Pack 1 Update 1 for Forefront Unified Access Gateway (UAG)". Support. Microsoft.
  29. ↑ "Rollup 1 for Forefront Unified Access Gateway (UAG) 2010 Service Pack 1 Update 1". Support. Microsoft.
  30. ↑ "MS12-026: Description of the security update for Microsoft Forefront Unified Access Gateway 2010 Service Pack 1 Update 1: April 10, 2012". Support. Microsoft.
  31. ↑ "Description of Service Pack 2 for Forefront Unified Access Gateway 2010". Support. Microsoft.
  32. ↑ "Description of Forefront Unified Access Gateway 2010 Service Pack 3". Support. Microsoft.
  33. ↑ "Description of Rollup 1 for Forefront Unified Access Gateway 2010 Service Pack 3". Support. Microsoft.
  34. ↑ "Description of Forefront Unified Access Gateway 2010 Service Pack 4". Support. Microsoft.
  35. ↑ "Rollup 1 for Forefront Unified Access Gateway 2010 Service Pack 4". Support. Microsoft.
  36. ↑ "Rollup 2 for Forefront Unified Access Gateway 2010 Service Pack 4". Support. Microsoft.

Further reading

  • Ben-Ari, Erez; Amara, Rainier (February 2011). Mastering Microsoft Forefront UAG 2010 Customization. PACKT. ISBN 978-1-84-968538-2. 
  • Ben-Ari, Erez; Dolev, Ran (August 2010). Microsoft Forefront UAG 2010 Administrator's Handbook. PACKT. ISBN 978-1-84-968162-9. 
  • Pavithran, Harish (18 June 2008). "Secure Remote Access: ISA Server 2006 vs IAG 2007". A Connected World through Software Architecture. Microsoft. Retrieved 24 July 2010. 
This article is issued from Wikipedia - version of the 11/18/2016. The text is available under the Creative Commons Attribution/Share Alike but additional terms may apply for the media files.