An endpoint policy is mostly used for controlling access—who can log in to the portal, and what applications users can launch, but it also can be used for more granular control. In addition to simply blocking a user's access to an application, applications that are published using the Web Application family of templates also allow an administrator to assign a policy for download and upload (a separate policy for each!). The idea is that downloading or uploading a file during a UAG session has more risks associated with it, and may require tighter security. For example, some organizations feel that it's OK for remote users to read their corporate e-mail using Outlook Web Access (OWA), but opening attachments from their emails is not OK, because the users may save the files locally and thus expose the company to a data-leak. Other organizations feel that letting their users attach files to outgoing messages (which is a type of upload) is risky, as those files...
Microsoft Forefront UAG 2010 Administrator's Handbook
By :
Microsoft Forefront UAG 2010 Administrator's Handbook
By:
Overview of this book
Microsoft Forefront Unified Access Gateway (UAG) is the latest in a line of Application Publishing (Reverse Proxy) and Remote Access (VPN) Server products. The broad set of features and technologies integrated into UAG makes for a steep learning curve. Understanding all the features and abilities of UAG is a complex task that can be daunting even to experienced networking and security engineers. This book is the first to be dedicated solely to Microsoft Forefront UAG. It guides you step-by-step throughout all the stages of deployment, from design to troubleshooting. Written by the absolute experts who have taken part of the product’s development, official training and support, this book covers all the primary features of UAG in a friendly style and a manner that is easy to follow. It takes you from the initial planning and design stage, through deployment and configuration, up to maintenance and troubleshooting. The book starts by introducing UAG's features and and abilities, and how your organization can benefit from them. It then goes on to guide you through planning and designing the integration of the product into your own unique environment. Further, the book guides you through the process of publishing the various applications, servers and resources - from simple web applications to complex client/server based applications. It also details the various VPN technologies that UAG provides and how to take full advantage of them. The later chapters of the book educate you with common routine “upkeep” tasks like monitoring, backup and troubleshooting of common issues. Finally, the book includes an introduction to ASP, which some of the product's features are based on, and can help the advanced administrator with enhancing and customizing the product.
Table of Contents (21 chapters)
Microsoft Forefront UAG 2010 Administrator's Handbook
Credits
About the Authors
About the Reviewers
www.PacktPub.com
Preface
Free Chapter
Planning Your Deployment
Installing UAG
UAG Building Blocks
Publishing Web Applications
Advanced Applications and Services
Authenticating and Controlling Access
Configuring UAG Clients
Endpoint Policies
Server Maintenance and Upkeep
Advanced Configuration
DirectAccess
Troubleshooting
Introduction to RegEx RegEx
Introduction to ASP
Index
Customer Reviews