TMG 2010 as content filter only?

[gshaw]

Just evaluating our filtering options at the moment, would prefer Smoothwall but in the event we can't find any extra budget I know I've got TMG 2010 on our Campus Licensing including the filtering lists.

 

We're not ready at the moment to change the firewall completely but was wondering if we can run TMG as a VM just as a proxy \ filtering service without the firewall functions?

 

(the main features I need are filtering policies based on AD groups, logging of web activity traceable to a user and custom white \ blacklists for anything not included or correct in the filtering lists)

[bio]

Yes you can configure TMG with just one nic and use it as a proxy with filtering enabled... However in my experience i would use its firewall capabilities as well (means 2 nics)

 

bio..

[gshaw]

Eventually I'll move to that with 3 NICs (one for DMZ) but in the meantime just need to update the current filtering and look at the firewall publishing rules etc when things quieten down a bit

 

Also want to do the firewall features on a dedicated server which will need to be ordered in (granted I could do it virtual but something in me prefers an isolated physical box for firewall functions)