1. Comprehensive, secure remote access to corporate resources
Microsoft® Forefront™ Unified Overview easy management and thereby reduce
management costs. In addition, Forefront
Access Gateway 2010 delivers
secure, anywhere-access to Forefront Unified Access Gateway 2010 UAG integrates a deep understanding of the
messaging, collaboration, and delivers comprehensive, secure remote applications published, the state of health of
access to corporate resources for employees, the devices being used to gain access, and
other resources, increasing
partners, and vendors from a diverse range the user’s identity to enforce granular access
productivity while maintaining
of endpoints and locations, including controls and policies.
compliance with policy.
managed and unmanaged PCs and
Forefront Unified Access
mobile devices.
Gateway provides a single
Building on the secure remote access
Key Features and Benefits
solution for administrators to
capabilities in Microsoft Intelligent
deliver access and implement Access anywhere
Application Gateway 2007, Forefront UAG
granular policies based on the
draws on a combination of connectivity Empowers users to be productive from
user’s identity and the health virtually any device or location
options, ranging from SSL VPN to
of the device. Windows® DirectAccess, as well as built-in Forefront UAG acts as a consolidated gateway
configurations and policies These enable from a diverse range of endpoints and
www.microsoft.com/uag
Forefront UAG to provide centralized and locations, providing access through a single
Seamless and secure remote connectivity with DirectAccess
With DirectAccess in Windows 7 and
Windows Server® 2008 R2, mobile workers
can seamlessly and securely access the entire
corporate network—file shares, intranet, and
line-of-business applications—wherever they Windows 7
have an Internet connection. Forefront UAG
Windows
works with DirectAccess to: Server 2008 R2
n Extend these benefits to legacy Always On Windows
Server 2008 R2
applications and resources, and support Windows
down-level IPv6 DirectAccess DirectAccess
Server 2008 R2 IPv6
and non-Windows clients through
integrated SSL VPN capabilities and SSL • VPN
other connectivity options.
n Limit exposure associated with connecting SSL • VPN DirectAccess
unmanaged, down-level, and non-
Windows clients through granular access Windows Vista /
Windows XP
controls and policies.
SSL • VPN
IPv4 Windows IPv4
or Server 2003
n Protect the DirectAccess gateway with IPv6
Legacy
a hardened edge solution and built-in Application Server
PDA
firewall. Non-Windows
Server
n Simplify deployment using built-in
wizards and tools.
Windows Server 2008 R2 Direct Access Server
n Support scalabilty and ongoing +
administration through built-in Microsoft Forefront Unified Access Gateway
array management and integrated
load balancing.

2. portal. Remote users—employees, partners, Extends Windows DirectAccess ensure that only authorized users or
and customers—can access Web and non- Forefront UAG delivers DirectAccess to groups can access particular applications
Web applications and gain full VPN access legacy applications and resources running or execute transactions.
to corporate networks including internal file on existing infrastructure and supports n Leverages credentials provided during
shares and client server applications. down-level and non-Windows clients a session to enable single sign-on to
through integrated SSL VPN capabilities internal applications.
Simplifies secure remote access
and other connectivity options.
Forefront UAG supports a wide range of
Microsoft applications, including Microsoft Simplified management
SharePoint®, Microsoft Exchange Server,
Integrated security
Reduces total cost of ownership by
Remote Desktop Services, and Microsoft Enhances security and increases consolidating infrastructure
Dynamics® CRM through predefined corporate compliance Delivers remote access connectivity
optimizer modules. These modules include Limits exposure through a combination
n through a combination of VPN, SSL VPN,
optimum settings and rules for securing of granular access policies, deep Web publishing, and DirectAccess. This
specific applications and are based on endpoint health inspection, and user enables organizations to standardize and
deep research into application behavior, authorization information. consolidate a disparate infrastructure onto
browser–server interactions, and endpoint
n Enables administrators to set up policies one cost-effective platform.
requirements. UAG also supports third-party
applications such as CRM, ERP, and HR. that specify prerequisites that endpoints
Simplifies deployment and ongoing
must meet for each transaction. They can
Administrators can publish the following management
implement these using built-in Forefront
types of applications using Forefront UAG: n Offers flexibility through form factors
UAG or Network Access Protection (NAP)
including hardware appliance (through
n Web applications and Web farms via policies downloaded from a Network
OEM partners) and server software.
reverse proxy. Policy Server (NPS).
n Facilitates the grouping of multiple
n RemoteApps through a Forefront UAG Enables a variety of strong Forefront UAG servers into an array.
portal by using Remote Desktop Services authentication methods All array members share the same
(Terminal Services) with an integrated n Integrates with Active Directory® and configuration and can be managed as
Remote Desktop Services Gateway.
easily overlays a wide variety of a single entity.
n Non-Web applications over a third-party authentication solutions and
n Uses wizards to simplify initial
secure connection using socket or repositories, allowing for strong
deployment and key ongoing tasks.
port forwarding as well as VPN authentication and enforcement
connections. through granular policies. This helps n Easily integrates Forefront UAG logging
through Microsoft SQL Server® and
management through System Center
Corporate Network Operations Manager.
Reduces support costs by simplifying
Microsoft
Mobile Applications connectivity for users
Typically security and access technologies
Home Computer are fragmented, resulting in a complex user
experience. Forefront UAG consolidates
LOB
Network Access Applications access to corporate resources, simplifying
Endpoint Browser HTTPS / HTTP
the user’s experience and reducing support
Internet
DirectAccess calls and their costs.
Remote
Desktop
Services
For more information about
Extranet Partners
Forefront Unified Access Gateway
Authentication 2010, visit www.microsoft.com/uag
Endpoint
Access
Control
Employees
Managed Machines
System Requirements
Features and functionality described require a 2.66 GHz or faster processor with dual core CPU; 4 GB RAM; 30 GB available hard-disk space; Windows
Server 2008 R2 Standard (RTM release) or Windows Server 2008 R2 Enterprise (RTM release) X64 bit editions; at least two network adapters.
©2010 Microsoft Corporation. All rights reserved. This document is for informational purposes only. MICROSOFT MAKES NO WARRANTIES, EXPRESS OR IMPLIED, IN THIS SUMMARY.