Home > Exchange Server > ISA vs TMG vs IAG vs UAG – Are you confused?

ISA vs TMG vs IAG vs UAG – Are you confused?

July 4, 2009
Alphabet Security for Exchange. Microsoft product placement and strategy is not great at the best of times and the future direction of ISA is no different.
In a nutshell….
If you want a reverse proxy, such as publishing OWA, ActiveSync, OA and Sharepoint to the internet, you will now use UAG. Yes, TMG can technically do both just as ISA can, but this is no longer a Microsoft recommended configuration.


ForeFront Threat Management Gateway (TMG, formerly ISA) is now being positioned as an outbound internet proxy for internal corporate users. It will include advanced anti-virus, anti-malware, and intrusion detection features.
While you can still use TMG as a reverse proxy for publishing internal web sites to the internet, that is not the recommended use. This is a big change from ISA, which is very commonly used as a reverse proxy.
ForeFront Unified Access Gateway (UAG, formerly IAG) is now the preferred solution for inbound access to internal corporate resources. This includes acting as a reverse proxy for applications such as OWA, Sharepoint etc.
Like IAG which included ISA under the hood, UAG will also include the TMG engine. Like IAG, in UAG you will not directly configure TMG. TMG is merely there to protect the UAG, not to provide TMG functionality for other applications.
Categories: Exchange Server
%d bloggers like this: