Moving from ISA 2006 - Recommendations?

[bandgeekmafia78]

Hi.

 

Our ISA 2006 box is old and creaky and I'd like to replace it in the Summer.

 

Can anyone recommend a decent firewall appliance please? I'd preferably like to find something that can import our existing firewall rules directly into it, but its not the end of the World if this isn't possible.

 

Cheers, and Happy New Year!

[EduTech]

Hi,

 

You could have a look at using Microsoft ForeFront Universal Access Gateway (UAG). Depending on what you use your ISA for currently this could do the same thing and hasn't just been killed off.

 

Regards,

James.

[Gatt]

UAG - Eugh!! Its so unreliable I wouldn't recommend it (Even though MS are now pushing it and ditching the far superior TMG [iSA's replacement])

 

We have had no end of problems with UAG it's untrue...

 

I personally would recommend TMG 2010 as you should be able to upgrade your existing ISA 2006 and keep all your rules intact.

Problem is that TMG 2010 is the last of the TMG line and will soon be scrapped...

 

In which case I would probably recommend something like Smoothall

[EduTech]

UAG - Eugh!! Its so unreliable I wouldn't recommend it (Even though MS are now pushing it and ditching the far superior TMG [iSA's replacement])

 

We have had no end of problems with UAG it's untrue...

 

I personally would recommend TMG 2010 as you should be able to upgrade your existing ISA 2006 and keep all your rules intact.

Problem is that TMG 2010 is the last of the TMG line and will soon be scrapped...

 

In which case I would probably recommend something like Smoothall

 

Be interesting to know what problems you have had mate?... I've not really had too many issues with it to be fair have it running in quite a few places without any bother.

 

But, agreed apart from MS Products (was thinking if you have an agreement in place) the smoothwall gang could sort you out!.. :-)

[box_l]

TMG is already unavaliable for licencing.

[chazzy2501]

I'm also running ISA2006 it does everything I need it too. it's not directly on the internet so I wasn't worried about it... Should I upgrade, I'm on EES and pay for TMG (for ISA). I'd of like to go with astaro but compared to M$ everyone seems expensive.

[cscott]

Smoothwall!

 

Microsoft have announced that they have ceased further development work on Forefront Threaht Managment Gateway (TMG), so it's a bit of a deadend product now.

 

We moved from TMG to a Smoothwall UTM-3000 box about a year ago, fabulous product.

[psillars]

Hi,

 

My personal choice would be to move on to something more hardware based, but it honestly depends on what you are looking to achieve. Smoothwall is great for the content filtering, then maybe a SonicWALL or a Palo Alto if you are looking for more granular application control and things like that.

 

I am not sure though that you will get many options for importing your old rules. We not so long ago helped one of the universities in Norwich to move away from ISA and we had to rebuild all the rules for them. It is actually not that bad as you often find a load of the rules are old or obsolete anyway.