Implementing Forefront Unified Access Gateway 2010

Describe the Forefront UAG solution and internal architectures.

Provide customers with licensing options for Forefront UAG.

This module covers the setup and configuration tasks for Forefront UAG, and describes how to migrate from Microsoft Intelligent Application Gateway 2007 (IAG) to Forefront UAG.

Installing Forefront UAG

Initial Configuration

Install Forefront UAG 2010

Configure the initial settings using the Getting Started Wizard

After completing this module, students will be able to:

Describe the Forefront UAG setup process.

Explain how customers can migrate from IAG to Forefront UAG.

In this module, you’ll understand the concept of a trunk in Forefront UAG, and how the product uses trunks to enable remote users to connect to internal applications. You’ll see the role of the Forefront UAG portals as front end interfaces for these users, and how Forefront UAG can be customized during deployments.

Trunks and Portals

Portal Customization

Client Detection

Create a HTTPS trunk in Forefront UAG

Configure an Active Directory authentication repository

After completing this module, students will be able to:

Understand how Forefront UAG uses trunks and portals to provide access to internal resources.

Explain how to customize the Forefront UAG portal look and feel.

Describe how Forefront UAG detects the remote endpoint capabilities and how to customize this process.

In this module, you will learn how to configure Forefront UAG to enable remote endpoints to have access to internal Web applications. You will see how to enable access to Microsoft Exchange and Microsoft SharePoint, and how to deploy federation using Active Directory Federation Services (AD FS).

Web Publishing Overview

Publishing Microsoft Exchange

Publishing Microsoft SharePoint

Deploying Federation with AD FS

Configure Outlook Web Access (OWA) publishing using the OWA look and feel

Configure OWA publishing inside the Forefront UAG portal

Publish Outlook Anywhere and Exchange Autodiscover

After completing this module, students will be able to:

Publish Web applications to the Internet using Forefront UAG trunks.

Enable remote client access to Microsoft Exchange and Microsoft SharePoint services.

Configure Forefront UAG to use federation for portal and application access.

In this module, you will see how Forefront Unified Access Gateway (UAG) allows you to provide access to published RemoteApps and Remote Desktops by integrating a Remote Desktop Gateway (RD Gateway) to provide an application-level gateway for Remote Desktop Services (RDS) and applications.

Remote Desktop Publishing Overview

Deploying RD Gateway Publishing

Publish RemoteApp applications using the Forefront UAG portal

Publish a predefined Remote Desktop

After completing this module, students will be able to:

Explain the benefits of using the Remote Desktop Gateway (RD Gateway) publishing feature.

Describe how Forefront UAG integrates with RD Gateway.

Explain how to configure Forefront UAG to publish RemoteApps, predefined Remote Desktops, and user-defined Remote Desktops.

This module explains how you can configure remote access to the corporate network using the legacy Network Connector application or the Secure Sockets Tunneling Protocol (SSTP).

Remote Network Access Overview

UAG/SSTP Integration Architecture

Configuring Remote Network Access

Configure remote network access using SSTP

Publish remote network access in the Forefront UAG portal

After completing this module, students will be able to:

Explain the different technologies used by Forefront UAG to enable remote access to the corporate network.

Describe how Forefront UAG integrates with Forefront TMG and Windows to provide SSTP VPN access to Windows 7 clients.

Configure Forefront UAG to provide remote network access using SSTP and the Network Connector.

This module provides an overview of the IPv6 protocol used by Forefront UAG DirectAccess, and the technologies associated with transitioning from IPv4 to IPv6 networking.

IPv6 Overview

IPv6 Transition Technologies

Use IPv6 link-local addresses for local network connectivity

Deploy an ISATAP router in an intranet

After completing this module, students will be able to:

Understand the limitations of the IPv4 protocol, and the benefits provided by IPv6.

Describe the addressing, routing, and name resolution characteristics of the IPv6 protocol.

Explain how ISATAP, 6to4, Teredo, and NAT64/DNS64 can be used to enable IPv6 connectivity over IPv4 networks.

This module gives an overview of DirectAccess, a technology enabled by Forefront UAG that provides seamless network access to Windows 7 clients.

DirectAccess Overview

DirectAccess Solution Components

Planning a DirectAccess Deployment

Deploying DirectAccess Using Forefront UAG

Prepare the infrastructure requirements for DirectAccess

Configure DirectAccess using Forefront UAG

After completing this module, students will be able to:

Understand the benefits provided by DirectAccess to users and IT organizations.

Describe the DirectAccess architecture and its components.

Understand the requirements and design decisions involved in a DirectAccess solution using Forefront UAG.

Configure DirectAccess using Forefront UAG.

This module presents an overview of the policy evaluation and enforcement technologies for the Forefront UAG endpoints.

Endpoint Policies

Network Access Protection Integration

Use the Endpoint Policies with a Forefront UAG portal application

Configure Network Access Protection (NAP) with Forefront UAG DirectAccess

After completing this module, students will be able to:

Explain how Forefront UAG can enforce endpoint policies.

Configure Forefront UAG to use NAP for policy validation.

This module explores how Forefront UAG uses arrays to scale out to large deployments—improving the scalability and availability of the solution while reducing management overhead.

Forefront UAG Array Management Overview

Deploying and Operating Forefront UAG Arrays

Network Load Balancing Integration

Install an additional Forefront UAG server

Configure a Forefront UAG array and perform post-array configuration tasks

After completing this module, students will be able to:

Explain the benefits provided by using Forefront UAG arrays.

Describe the array management architecture, and the tasks involved in creating and managing an array.

Explain how the Network Load Balancing feature of Windows Server is integrated into Forefront UAG.

This module covers the considerations involved in designing, deploying, and troubleshooting an enterprise access solution based on Forefront UAG.

Deploying Forefront UAG in Enterprise Environments

Supporting and Troubleshooting Forefront UAG

After completing this module, students will be able to:

Describe the process of designing and deploying Forefront UAG in an enterprise environment.

Describe the tools and best practices for troubleshooting issues with Forefront UAG.