Forefront TMG MBE Frequently Asked Questions
Find answers to frequently asked questions here.
View all answers
Q. What is Forefront Threat Management Gateway?
A.
Forefront Threat Management Gateway (TMG), the evolution of ISA Server, joins other Forefront products under the Microsoft Forefront brand, and delivers a comprehensive and integrated Edge security gateway that helps provide protection from multiple Internet-based threats, secure connectivity, and simplified management.
TMG builds on top of existing ISA Server functionality and delivers new protection capabilities, including Web antimalware, as well as enhancements to the UI, management, and reporting. TMG plays a critical role in the overall Forefront vision of providing protection across client, server, and edge.
TMG provides value to IT managers, network administrators, and information security professionals who are concerned about the security, performance, manageability, or reduced cost of network operations. TMG can help:
- Defend Against External and Internal Web-Based Threats. TMG was engineered to deliver stronger security to manage and protect your networks.
- Securely Publish Content for Remote Access. TMG helps streamline the implementation, providing security for corporate applications accessed over the Internet.
- Connect and Secure Branch Offices. TMG provides a robust way to more securely expand corporate networks, reducing network costs by utilizing existing network connections.
TMG beta 1 is currently available for download and evaluation as part of the Forefront codename “Stirling” beta 1. Please see the
download page for more information.
Q. What is Forefront TMG MBE?
A.
Forefront TMG Medium Business Edition is a critical security and protection component of Essential Business Server, and has been designed to help provide comprehensive threat management, secure Internet access, and secure remote access for small to medium size organizations (up to 300 users).
Unified Threat Management. TMG MBE includes a fully featured and highly rated corporate firewall capability, and adds a Unified Threat Management (UTM) capability to the Essential Business Server (EBS) installation. The value comes through the tight integration of the different UTM components, as well as integration with the other applications and solutions encompassing EBS. TMG MBE implements a Unified Threat Management solution by utilizing all of its protection and remote access features. No separate, standalone products are required because TMG MBE provides a complete security solution, particularly attractive to small and midsize organizations.
Secure Application Publishing. TMG MBE provides easy and controlled remote access to internal resources, data, and applications. TMG MBE provides the basic access capabilities to more securely publish Microsoft Exchange Server (Outlook Web Access) and Microsoft Office SharePoint Server. Customers who need to publish a range of applications, need granular policy control of resource access, need additional endpoint security, and need a customizable portal experience for end users should evaluate the comprehensive access capabilities delivered by Microsoft Intelligent Application Gateway.
Q. What is the difference between Forefront TMG and Forefront TMG MBE?
A.
Forefront TMG is the next version of the ISA Server, and builds on top of existing ISA Server functionality to deliver new protection capabilities, including Web antimalware, as well as enhancements to the UI, management, and reporting. Forefront TMG will be able to support organizations of various sizes, from small businesses to large enterprises. Forefront TMG MBE is a security and protection component specifically for Windows Essential Business Server 2008, to help provide comprehensive threat management, secure Internet access, and secure remote access for small to medium size organizations (up to 300 users).
Q. How is Forefront TMG MBE available?
A.
TMG MBE is available as part of Windows Essential Business Server, as well as standalone.
Q. Will there be a version of ISA Server 2006 that runs on Windows Server 2008?
A.
In the current plan, only TMG will run on Windows Server 2008.
Q. Is TMG MBE 64-bit?
A.
Yes, TMG MBE is Windows Server 2008, 64-bit compatible. There will not be a 32-bit version (except for evaluation purposes).
Q. Is TMG MBE available as a hardware appliance?
A.
There are no plans to make TMG MBE available as a hardware appliance from our partner OEMs.
Q. Does Forefront TMG MBE have subscription services, or is everything included when you buy the server license?
A.
There is a separate, optional Web antimalware subscription service – Web Antimalware Subscription for Forefront TMG MBE.
Essential Business Server customers receive 1 year of the Web Antimalware Subscription service with the purchase of EBS. For more information, please refer to the
EBS Web site.
TMG MBE standalone customers, who want to activate their Web antimalware service, must purchase a separate Web Antimalware Subscription.
Q. How will Forefront TMG MBE be licensed?
A.
Forefront TMG MBE standalone will be licensed the same way as ISA Server 2006 – per processor. In addition, the Web Antimalware Subscription will be licensed separately, the same way as other subscription-based Forefront security products – per user/device, per year.
When shipped as part of Essential Business Server, Forefront TMG MBE will be subject to the EBS licensing model.
Q. Can ISA customers with active Software Assurance upgrade to TMG MBE?
A.
No. While TMG MBE is built on top of existing ISA capabilities and is part of the TMG family, it is not the next version of the ISA Server. Furthermore, TMG MBE standalone does not have a Software Assurance coverage option and will not be eligible for an upgrade to the next version of TMG.
Q. Is Software Assurance available for TMG MBE?
A.
No. TMG MBE standalone does not have a Software Assurance coverage option and will not be eligible for an upgrade to the next version of TMG.
Q. Will the Web Antimalware Subscription require a separate software install?
A.
No. The software that enables the Web antimalware capability is embedded in Forefront TMG MBE server code, and the subscription management interface is a part of the overall Forefront TMG MBE management interface. TMG MBE customers will need to purchase a separate Web Antimalware Subscription SKU to activate the Web antimalware capabilities.
Q. Will the Web Antimalware Subscription have to be purchased separately?
A.
EBS customers will receive 1 year of the Web Antimalware Subscription service with the purchase of EBS, and will be able to renew it on a per user, per year basis thereafter.
Forefront TMG MBE standalone customers will need to purchase a separate Web Antimalware Subscription SKU to activate the Web antimalware capabilities.