TMG publishing replacement?

[sjpf]

We moved to Smoothwall last year due to TMG becoming end of life. All seems to have gone well but we still haven't found a suitable solution for publishing Sharepoint.

 

Anyone have any ideas? I am looking for anything that will provide a login form providing SSO to some other web apps as well as Sharepoint.

 

I tried using the web application proxy part of Server 2012 R2 and it was ridiculously difficult and couldn't get it so that users only logged in with their sAMAccountName

[Norphy]

We're using UAG at the moment but at best this is a short term thing. Sad to say, it's probably best that you persevere with the web application proxy.

[TheScarfedOne]

Was going to be doing exactly that...the web proxy is the best way, and the documented way to do it now

[sjpf]

When I first read about the web application proxy I thought it would be a great way to do it but it has proved much more difficult than expected. With TMG it was a case of publishing sharepoint with no sharepoint configuration necessary. With the WAP it requires quite a bit of configuration and I can't get people to login with their standard username either. They have to login with username@domain which for teachers will be too much hassle.

[psydii]

Like they do for every other service on the internet?

 

At least with WAP, if you've put the (not inconsiderable) effort in you can get SSO to all on prem and 365 services...

 

(P.S please do this and write me up a handy step by step guide so I can avoid the pain!)

[sjpf]

You would think it would be easy to remember the username but we are talking about people who think their computer isn't working when in actual fact the monitor is switched off.

 

I have WAP and ADFS 3 all set up and working but not properly with Sharepoint....

[minimoo]

We've got a kemp VM as a load balancer to purely do inbound publishing as they do multi-site authentication a bit like TMG did.

 

Works a bit differently - I *think* it only supports Basic auth onwards (whereas I think windows support kerberos and everything else), but may be worth a look as it's the closest thing I could find.

 

We moved from TMG to Watchguard+Kemp.

[sjpf]

Thanks for that. I did come across the Kemp Edge Security Pack when I was searching online but was put off by having to buy a complete product when all I wanted was a small feature of one of their products! I will see what quote they come back with!