• Cover

  Page I

• Copyright

  Page II

• Table of Contents

  Page III

• Acknowledgments

  Page VII

• Introduction

  Page IX

• + Chapter 1: Understanding Forefront Unified Access Gateway

  Page 1

  • From IAG to Forefront UAG

    Page 1

  • + What’s New in Forefront UAG

    Page 4

    • Improvements for Installation and Deployment

      Page 5

    • High Availability and Scalability

      Page 6

    • UAG as a DirectAccess Server

      Page 7

    • New Publishing Capabilities

      Page 8

    • Remote Access Client VPN Services

      Page 9

    • Other New Features

      Page 9

  • When to Use Forefront UAG

    Page 12

  • Administrator’s Punch List

    Page 13

• + Chapter 2: Planning and Installing Forefront UAG

  Page 15

  • + Planning Forefront UAG Deployment

    Page 15

    • Corporate Access Model

      Page 16

    • Name Resolution

      Page 17

    • Public Key Infrastructure

      Page 18

    • Domain and Workgroup Membership

      Page 19

    • IPv6 Considerations

      Page 20

    • External and Internal Firewalls

      Page 21

    • Fault Tolerance and Load Balancing

      Page 24

    • Network Access Protection

      Page 24

  • Hardware Requirements

    Page 26

  • + Software Requirements

    Page 26

    • Forefront UAG Server Software Requirements

      Page 26

    • Forefront UAG Client Requirements

      Page 27

  • Installing Forefront UAG

    Page 29

  • Configuring Forefront UAG

    Page 34

  • + Deploying a Forefront UAG Array

    Page 43

    • Requirements

      Page 43

    • Creating an Array

      Page 43

  • Administrator’s Punch List

    Page 48

• + Chapter 3: Publishing Applications through Forefront UAG

  Page 51

  • + Understanding the Publishing Mechanism on Forefront UAG

    Page 51

    • Authentication Repository

      Page 52

    • Creating a Portal Trunk

      Page 55

    • Client Experience

      Page 60

  • Publishing Exchange

    Page 63

  • + Publishing Remote Desktop Services

    Page 71

    • Why Use Forefront UAG to Publish Remote Desktop Services?

      Page 73

    • Publishing RemoteApp Programs

      Page 74

    • Publishing an Administrator-Controlled Remote Desktop

      Page 79

    • Publishing User-Defined Desktops

      Page 82

  • + Publishing SharePoint

    Page 85

    • Why Use Forefront UAG as a SharePoint Publishing Solution?

      Page 86

    • Forefront UAG Web Site Certificate Requirements

      Page 87

    • Publishing a Simple Windows SharePoint Services 3.0 Web Site

      Page 88

    • Validating the Configuration

      Page 90

  • Administrator’s Punch List

    Page 94

• + Chapter 4: Implementing SSL VPN with Forefront UAG

  Page 95

  • Understanding SSL VPN Options

    Page 95

  • + Planning and Configuring SSTP

    Page 96

    • Configuring SSTP on Forefront UAG

      Page 99

    • Client Experience with SSTP

      Page 102

  • + Configuring SSL Network Tunneling

    Page 102

    • Customizing Network Connector Settings

      Page 109

    • Client Experience with Network Connector

      Page 111

  • Administrator’s Punch List

    Page 113

• + Chapter 5: Implementing Forefront UAG with DirectAccess

  Page 115

  • + How DirectAccess Works

    Page 116

    • DirectAccess Client Connectivity

      Page 117

    • IPv6 Transition Technologies

      Page 119

    • The Name Resolution Policy Table (NRPT)

      Page 121

    • Forefront UAG NAT64/DNS64 and IPv4-Only Corporate Resources

      Page 123

    • Infrastructure Components of a Forefront UAG DirectAccess Solution

      Page 125

    • DirectAccess Security Considerations

      Page 132

    • Summary of the DirectAccess Client Security Model

      Page 140

  • Forefront UAG 2010 DirectAccess Requirements

    Page 141

  • + Forefront UAG 2010 DirectAccess Configuration Wizard

    Page 142

    • Running the Forefront UAG DirectAccess Wizard

      Page 142

  • Administrator’s Punch List

    Page 153

• + About the Authors

  Page 155

  • Yuri Diogenes

    Page 155

  • Dr. Thomas W. Shinder

    Page 156

• Resources for Microsoft ExchangeServer and Forefront

  Page 158

• Windows Server 2008—Resources for Administrators

  Page 159

Plan, design, and deploy Forefront United Access (UAG) with insights straight from the Forefront team at Microsoft. Forefront Unified Access Gateway (UAG)--the evolution of the Microsoft Intelligent Application Gateway (IAG)--delivers a more robust and transparent solution for inbound access from anywhere. This pragmatic guide drills into system components and capabilities, identifies software and hardware requirements, and provides scenario-based advice for planning and design, including policy control and availability and scalability considerations. You'll learn how to plan and deploy an SSL VPN solution for your environment, and how to publish applications through Forefront UAG, including Microsoft Exchange Server, SharePoint® 2010, and Windows Server® 2008 Remote Desktop Services.