Monday, November 10, 2008

Forefront Threat Management Gateway - full protection circle

As you might know Microsoft is (beta) releasing a new product called Forefront Threat Management Gateway (Forefront TMG) code name "Stirling". Forefront TMG is the successor of ISA server 2006. Being in the technology an security business I couldn't resist myself to test drive it on a virtual Hyper-V guest.

The reason I couldn't resist myself is simple Forefront TMG completes the circle. It can work together with Forefront Client Security, another Microsoft Anti-Virus desktop product.

What makes Forefront TMG an intresting product is that is has built in HTTP traffic scanning for malware and signatures. It introduces an extra layer of defense. Which is needed because rolling out and testing important updates for windows or other import products like Adobe and SUN (Java) takes time. And in that time clients may get infected or worse.

But the good news doesn't stop there. It's also able to detect infected or not properly protected clients and put them in quarantine and more. And if you check my previous post you'll see it works very well and is more then welcome.

Another good thing is that Microsoft release updates for Forefront TMG in sync with their own update services. So it will be a must have from a security perspective.

What's nice as well that is 100% Hyper-V compatible. Making a test scenario very easy.

Offcourse antivirus protection on ISA server or firewall level is already possible but not with interaction with desktop software. In the mean time you can use a product like GFI webmonitor or similar

A good step Microsoft took to a safer digtal world.

What do you think?

No comments: