Integrating Web Filter & Security with TMG

Deployment and Installation Center | Web Filter & Security | v8.3.x

Web Filter & Security can be integrated with Microsoft® Forefront™ Threat Management Gateway (TMG).

Refer to Installation Instructions: Web Filter &Security as your primary source of installation instructions. Only additional or alternate steps required to enable TMG integration are provided here.

An integration with TMG affects the following web protection components:

ISAPI Filter plug-in: This additional component is installed on the machine running TMG. The ISAPI Filter plug-in configures TMG to communicate with Filtering Service.

Filtering Service: Interacts with TMG and Network Agent to manage Internet requests. Filtering Service either permits the Internet request or sends an appropriate block message to the user.

After the Filtering Service is installed, the ISAPI Filter plug-in must be installed on every TMG machine in your network.

Network Agent: Manages Internet protocols that are not handled by TMG. Network Agent also enables bandwidth-based request management.

If your environment includes an array of TMG machines, install Web Filter & Security components on a machine outside the array.

When TMG receives an Internet request from a user, it passes the request to Filtering Service, which determines the category assigned to the URL and checks the policy assigned to the client.

If the site is assigned to a blocked category, the client receives a block page instead of the requested site.

If the site is assigned to a permitted category, Filtering Service notifies TMG that the site is not blocked, and the client is given access to the site.

The following topics discuss the various aspects of integrating with TMG:

Deployment considerations for integration with Forefront TMG

Installing Web Filter & Security to integrate with Forefront TMG

Upgrading Web Filter & Security when integrated with ISA Server or Forefront TMG

Removing the ISAPI Filter Plug-In

Converting to an integration with Forefront TMG

Forefront TMG initial setup

User identification and authentication with Forefront TMG