Microsoft Forefront Unified Access Gateway Server 2010, OVS, OLV C, AP 35D-00042 Fascicule

portal. Remote users including employees, 
partners, and customers, can access Web 
and non-Web applications and gain full VPN 
access to corporate networks. 

Simplifies secure remote access
Forefront UAG supports a wide range of 
Microsoft applications, including Microsoft 
SharePoint

®

, Microsoft Exchange Server, 

Remote Desktop Services, and Microsoft 
Dynamics

®

 CRM through predefined 

optimizer modules. These modules include 
optimum settings and rules for securing 
specific applications and are based on 
deep research into application behavior, 
browser–server interactions, and endpoint 
requirements. 
Administrators can publish the following 
types of applications using Forefront UAG:

n

  Web applications and Web farms via 

reverse proxy.

n

  RemoteApps through a Forefront UAG 

portal by using Remote Desktop Services 
(Terminal Services) with an integrated 
Remote Desktop Services Gateway. 

n

  Non-Web applications over a secure 

connection using socket or port 
forwarding as well as VPN connections. 

Extends Windows DirectAccess
Forefront UAG delivers DirectAccess to 
legacy applications and resources running 
on existing infrastructure and supports 
down-level and non-Windows clients 
through integrated SSL VPN capabilities 
and other connectivity options.

n

  Limits exposure through a combination 

of granular access policies, deep 
endpoint health inspection, and user 
authorization information.

n

  Enables administrators to set up policies 

that specify prerequisites that endpoints 
must meet for each transaction. Endpoint 
health can be inspected using built-in 
UAG policies or through integration with 
Network Access Protection (NAP).

n

  Integrates with Active Directory

®

 and 

easily overlays a wide variety of  
third-party authentication solutions and 
repositories, allowing for strong 
authentication and enforcement  
through granular policies. This helps 

ensure that only authorized users or 
groups can access particular applications 
or execute transactions.

n

  Leverages credentials provided during 

a session to enable single sign-on to 
internal applications.

consolidating infrastructure
Delivers remote access connectivity 
through a combination of VPN, SSL VPN, 
Web publishing, and DirectAccess. This 
enables organizations to standardize and 
consolidate a disparate infrastructure onto 
one cost-effective platform.

n

  Offers flexibility through form factors 

including hardware appliance (through 
OEM partners) and server software.

n

  Facilitates the grouping of multiple 

Forefront UAG servers into an array. 
All array members share the same 
configuration and can be managed as  
a single entity. 

n

  Uses wizards to simplify initial 

deployment and key ongoing tasks. 

n

  Easily integrates Forefront UAG logging 

through Microsoft SQL Server

®

 and 

management through System Center 
Operations Manager.

connectivity for users
Typically security and access technologies 
are fragmented, resulting in a complex user 
experience. Forefront UAG consolidates 
access to corporate resources, simplifying 
the user’s experience and reducing support 
calls and their costs.

©2010 Microsoft Corporation. All rights reserved. This document is for informational purposes only. MICROSOFT MAKES NO WARRANTIES, EXPRESS OR IMPLIED, IN THIS SUMMARY. 

Features and functionality described require a 2.66 GHz or faster processor with dual core CPU; 4 GB RAM; 30 GB available hard-disk space; Windows 

Server 2008 R2 Standard (RTM release) or Windows Server 2008 R2 Enterprise (RTM release) X64 bit editions; at least two network adapters.