AceDaz Posted January 14, 2014 Posted January 14, 2014 Has anyone found a cheap alternative to TMG which has everything in a all-in-one box? We are planning to change Broadband provider at some point and looking to get a Fortigate Firewall, but we need to replace TMG soon and need to provide a cheap like for like. Has anyone changed their TMG Cheaply? Thanks
AceDaz Posted January 14, 2014 Author Posted January 14, 2014 Yeah I have looked at that, but its still a lot of money. I was quoted £4,200 for a software version?
localzuk Posted January 14, 2014 Posted January 14, 2014 We switched to a generic linux box, running Squid for proxying iptables for routing and apache for reverse proxying. As we run it as a VM, purchase cost was nill. Setup time was a bit longer though.
LukeC Posted January 14, 2014 Posted January 14, 2014 Can you not integrate it as part of you broadband project as the UTM can also be used as a firewall?
AceDaz Posted January 14, 2014 Author Posted January 14, 2014 We switched to a generic linux box, running Squid for proxying iptables for routing and apache for reverse proxying. As we run it as a VM, purchase cost was nill. Setup time was a bit longer though. I was looking at implenting something myself, but due to time constraints and other factors this isnt really an option.
AceDaz Posted January 14, 2014 Author Posted January 14, 2014 Can you not integrate it as part of you broadband project as the UTM can also be used as a firewall? The Fortigate we "were" going to be supplied with doesn't support Reverse Proxy, but it will more than likely be approx 8-10 months before we will be going down that route.
zag Posted January 14, 2014 Posted January 14, 2014 Sophos UTM or a Smoothwall will work fine. Infact probably a lot better than TMG in the long run.
spc-rocket Posted January 14, 2014 Posted January 14, 2014 The Fortigate we "were" going to be supplied with doesn't support Reverse Proxy, but it will more than likely be approx 8-10 months before we will be going down that route. You may want to get the fortinet and the use the server 2012 R2 web application proxy service to do reverse publishing. Ash.
AceDaz Posted January 14, 2014 Author Posted January 14, 2014 Sophos UTM or a Smoothwall will work fine. Infact probably a lot better than TMG in the long run. The hardware is recent, so ideally something in the hundreds than the thousands
AceDaz Posted January 14, 2014 Author Posted January 14, 2014 You may want to get the fortinet and the use the server 2012 R2 web application proxy service to do reverse publishing. Ash. Considered that, but then we would have a redundant server thats just over 18 months old
spc-rocket Posted June 2, 2014 Posted June 2, 2014 Considered that, but then we would have a redundant server thats just over 18 months old Hi, I know its an old thread, we're looking to replace our TMG box as well and the server HW is not bad. I'm looking at the sophos UTM - looks good in terms of features etc and they are improving all the while (latest version is 9.2 and you can download a 30 day trial to test it). Not sure yet how it is actually licensed but will be looking at this closely. One of the things it has is the web server protection (this replaces the functionality of reverse web publishing in TMG etc). The software is available as an appliance, virtual image or image you can install on your own HW so its flexible. Its best not to go for HW appliance based as you will be paying for support and the cost of advance HW replacement etc - virtual may be better but then again you have the HW already so its worth installing on that to see how it performs. Ash.
AceDaz Posted June 2, 2014 Author Posted June 2, 2014 Hi Ash. Let me know how you get on as I'm still looking for a good reverse proxy for Exchange and RD Web
john Posted June 4, 2014 Posted June 4, 2014 Citrix Netscaler maybe? I know @Ric_ is raving about how amazing they are and how they make good TMG replacements.
MonkeyofDoom Posted June 4, 2014 Posted June 4, 2014 There are number of options depending how much work you want to: > Sonicwall > Smothwall > untangle Gateway Add 2012 proxying to above where needed
AceDaz Posted June 4, 2014 Author Posted June 4, 2014 Our main issue was the reverse proxy for our internal websites. We have multiple websites running off multiple servers (1 server has multiple websites hosted on it using web headers) and also web publishing such as OWA / ActiveSync / Outlook Anywhere / RD Web. This is what I have struggled finding a replacement for. For 2012 Proxying using IIS Rewrite I need to upgrade my DCs to 2012 R1 and setup a couple of ADFS boxes for SSO. There are number of options depending how much work you want to: > Sonicwall > Smothwall > untangle Gateway Add 2012 proxying to above where needed
diagdave Posted June 5, 2014 Posted June 5, 2014 (edited) You don't need your DC upgraded to use the new ADFS Web application proxy. We use it and although a little complicated, requiring a combination of adfs and url rewrite and iis web proxy, it works great. Note: We publish everything you have listed and more, and that's repeated across 3 domain names Edited June 5, 2014 by diagdave
MonkeyofDoom Posted June 5, 2014 Posted June 5, 2014 You could also go the open source route with something like below: Unified Communications with Microsoft: Configuring Apache as a Reverse Proxy for Lync Server
spc-rocket Posted June 5, 2014 Posted June 5, 2014 Hi Ash. Let me know how you get on as I'm still looking for a good reverse proxy for Exchange and RD Web Hi Darren, We have downloaded it and just doing a few things on a small box at the moment and it looks good. There are various features that are included and others are more modular based which you can pay for if you require them. It support regex for web filtering etc among other things. The think i like about it is that its pretty much eveyrthing on one system i.e. firewall, ids, webfilter, web server publishing, vpn etc. I think you will find a lot of companies will try to unify a lot of these services into one system/appliance. Ash.
cogrady84 Posted June 5, 2014 Posted June 5, 2014 I've been considering PfSense, had a small window of time to look at it late last year but haven't made any commitments yet. Any comments on whether people think PfSense is a viable alternative? It appeared to offer everything I needed and seemed to be relatively simple to setup, and free which is always good.
clodhopper Posted June 5, 2014 Posted June 5, 2014 Take a look at Watchguard XTM devices, very good pricing & feature rich. We're looking to get a HA pair for this summer
AceDaz Posted June 5, 2014 Author Posted June 5, 2014 We have a Apache Server running as a reverse proxy for other websites running on linux, but it doesnt seem to allow HTTP over RPC You could also go the open source route with something like below: Unified Communications with Microsoft: Configuring Apache as a Reverse Proxy for Lync Server
MonkeyofDoom Posted June 5, 2014 Posted June 5, 2014 We have a Apache Server running as a reverse proxy for other websites running on linux, but it doesnt seem to allow HTTP over RPC got to love open source https://github.com/bombadil/mod_proxy_msrpc this is the mod that fixes that for you.
Hawes29 Posted June 7, 2014 Posted June 7, 2014 We moved from TMG 2010 to a Cisco ASA 5525 x with the CX and Application modules. It takes some getting use to but very powerful.
seawolf Posted June 7, 2014 Posted June 7, 2014 Has anyone found a cheap alternative to TMG which has everything in a all-in-one box? We are planning to change Broadband provider at some point and looking to get a Fortigate Firewall, but we need to replace TMG soon and need to provide a cheap like for like. Has anyone changed their TMG Cheaply? Thanks I would recommend taking a look at the iBoss web filter and firewall solutions. You can get a web filter/reporter appliance for under 2k and a firewall that integrates with the web/filter and reporter for about the same. I've said it before and I say it again - the iBoss web filter is the best there is. Their firewall is also very capable. It is more basic than some that you can buy, although I'd say many people only use 20% of the features of the high-end firewalls, and what the iBoss firewall does it does well, especially the logs and reporting, and ease of config and ongoing maintenance,
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now