TMG Retired by Microsoft - What product to use going forward?

n30_mkii

n30_mkii

n30_mkii

Associate
Joined
31 May 2005
Posts
2,058
Location
Alfreton,Derbyshire
Hi all, we currently have an ISA 2006 setup which is configured with an internal / perimeter / external setup.

We have web servers and external services in the DMZ leg and have a split DNS to access the content. We publish sites using TMG utilising listeners and the radius client abilities.

Now the question at the minute is around moving to a new product. A couple of my colleagues have just attended TMG 2010 training and would like to move to that, however I have reservations as mainstream support will stop in 2015 and will only then be extended paid for support if we have any issues.

UAG is still going to be supported but is more expensive and has features we won't leverage, we only really need the firewall / DMZ setup and web publishing. I'm thinking it would be a good time to look at a hardware or software replacement so thought I would get peoples opinions on what you use and what you would do in our situation?

I will feel a little dirty implementing a TMG 2010 setup knowing that it's life is going to be limited :rolleyes:
 

kefkef

kefkef

kefkef

Soldato
Joined
18 Oct 2002
Posts
4,034
Location
Somewhere on the Rainbow
Usual MS lifespan would apply to them both surely (UAG currently shows EoM in 2015 and EoE 2020)? Roughly 5yrs from release they go end of mainstream, 10yrs they go end of extended. They'll still have security patches going and plenty of companies will support them through that lifecycle for config/setup purposes.

We're currently running our DMZ through Cisco ASA's and are binning the ISA2004 platform we use for internet proxy and replacing with Sophos web appliances.
 

Burnsy2023

Burnsy2023

Burnsy2023

Man of Honour
Joined
17 Nov 2003
Posts
36,743
Location
Southampton, UK
n30_mkii said:
I will feel a little dirty implementing a TMG 2010 setup knowing that it's life is going to be limited :rolleyes:
Click to expand...

I am currently planning a huge new IT system and TMG was a core part of my design as a back firewall and publishing service. UAG might fit most of my requirements but I'll have to re-evaluate my whole design. I suppose I should have picked up on the product roadmap earlier.

I don't think I could bring myself to implement a product that has such limited support when this system will be in place probably for the best part of a decade. I also need web publishing for services like Lync 2013 and Exchange 2013 which obviously TMG won't get.

This really has put a spanner in the works.
 

paradigm

paradigm

paradigm

Caporegime
Joined
26 Aug 2003
Posts
37,506
Location
Leafy Cheshire
It's a really weird decision that there is no replacement product (well, there is, but not for at least 6 months).

I'm now going to have to move towards outing our current TMG environment.
 

paradigm

paradigm

paradigm

Caporegime
Joined
26 Aug 2003
Posts
37,506
Location
Leafy Cheshire
It will be the "cloud" based services that replace TMG. Not sure how you determine that it's not for you though. It should be based on the next iteration of System Center (ie the one due after 2012 SP1), and will be utterly seamless.

I can't wait until we can have our entire infrastructure as a service (obviously with a presence on site in a hybrid-cloud style environment).
 

kefkef

kefkef

kefkef

Soldato
Joined
18 Oct 2002
Posts
4,034
Location
Somewhere on the Rainbow
Not sure why people are so against implementing TMG2010 due to the mainstream support end date, are you saying that you have all upgraded every 2003 server as the mainstream support has ended, aren't bothering with Server 2008R2 or SQL2008 any more as mainstream ends in 2014/15?? It's supported until 2020 so is still a viable product to implement, you just don't get the free support (in 15yrs I've never used that!) and design/feature changes.
 

Burnsy2023

Burnsy2023

Burnsy2023

Man of Honour
Joined
17 Nov 2003
Posts
36,743
Location
Southampton, UK
kefkef said:
Not sure why people are so against implementing TMG2010 due to the mainstream support end date, are you saying that you have all upgraded every 2003 server as the mainstream support has ended, aren't bothering with Server 2008R2 or SQL2008 any more as mainstream ends in 2014/15?? It's supported until 2020 so is still a viable product to implement, you just don't get the free support (in 15yrs I've never used that!) and design/feature changes.
Click to expand...

One of my main concerns is making sure that the web publishing side will be continually developed for new products, which TMG obviously won't.
 

paradigm

paradigm

paradigm

Caporegime
Joined
26 Aug 2003
Posts
37,506
Location
Leafy Cheshire
kefkef said:
Not sure why people are so against implementing TMG2010 due to the mainstream support end date, are you saying that you have all upgraded every 2003 server as the mainstream support has ended, aren't bothering with Server 2008R2 or SQL2008 any more as mainstream ends in 2014/15?? It's supported until 2020 so is still a viable product to implement, you just don't get the free support (in 15yrs I've never used that!) and design/feature changes.
Click to expand...

Actually, all our SQL boxes are 2008R2, or even SQL 2012.
 

knowlesy

knowlesy

knowlesy

Soldato
Joined
6 Jan 2006
Posts
4,663
Location
Newcastle
would it be a sin to suggest Watchguard (used to be known as firebox) ? they have a variety of features and are pretty robust on a side note their SSL gear / UAG's competitor even works with IE10 from what I remember which UAG still currently doesn't support sigh :(
 

MacRS4

MacRS4

MacRS4

Soldato
Joined
15 Dec 2008
Posts
2,686
Location
London
TMG features are also available in UAG.

Also, don't forget there's reverse proxy services built in to Windows IIS too - that'll work for a lot of services like Lync, SharePoint & Exchange. It's called Windows IIS Application Request Routing, or ARR.
 
You must log in or register to reply here.
Back
Top Bottom