Mohit Saxena Senior Technical Lead Microsoft Corporation

Transcription

1

2 Mohit Saxena Senior Technical Lead Microsoft Corporation

3 Session Objectives And Takeaways UAG Overview & Vision Deep dive to some features: Array NLB Remote Desktop Services Portal Exchange

4 Today's workforce is mobile

5 5 The new information workplace Home USB Drive Mobile Devices The flow of information has no boundaries Information is shared, stored and accessed outside the control of its owner Partner Organization

6 UAG Solution Architecture Data Center / Corporate Network Exchange Mobile CRM SharePoint IIS based Home / Friend / Kiosk Internet Layer3 VPN HTTPS (443) IBM, SAP, Oracle Terminal / Remote Desktop Services DirectAccess Non web Business Partners / Sub-Contractors AD, ADFS, RADIUS, LDAP. NPS, ILM Employees Managed Machines

7 UAG Vision Increasingly, people envision a world of anywhere access - a world in which the information, the communities, and the content that they value is available instantly and easily, no matter where they are. Bill Gates Enabling Secure Anywhere Access in a Connected World, Feb 2007

8 Roadmap Forefront Edge Security and Access products provide enhanced network edge protection and application-centric, policy-based access to corporate IT infrastructures Today Tomorrow Protection Access

9 + UAG is optimized for the broad range of Exchange solutions, delivering secure, anywhere access for employees and partners. Anywhere Access Deliver simple and secure remote access to Exchange from any location or device through integrated SSL VPN capabilities. Improve productivity by easily publishing client/server applications and networking resources alongside messaging. Integrated Security Drive compliance using out-of-the-box rules and policies created for Exchange. Easily integrate strong authentication and endpoint health assessment into Exchange security policies. Limit information access and prevent data leakage. Simplified Management Easily create and publish remote access policies for Outlook Web Access, Outlook Anywhere, and ActiveSync. Manage all remote access to Exchange through single gateway. Scale remote access deployments for Exchange with integrated load balancing.

10 + UAG is optimized for SharePoint, delivering secure, anywhere access for your employees, partners and customers. Anywhere Access Deliver a simple and secure remote user experience for SharePoint through integrated SSL VPN capabilities. Extend SharePoint portal functionality by integrating client/server applications and networking resources. Enables easy, secure access to multiple SharePoint portals through integration with Active Directory and web-based single sign-on. Integrated Security Drive compliance through out-of-the-box rules and built-in policies for SharePoint. Easily integrate strong authentication and endpoint assessment into access policies. Limit information access and prevent data leakage. Simplified Management Easily create and publish remote access policies for SharePoint extranets. Manage all remote access to SharePoint through a single gateway. Simplify deployment and ongoing tasks through wizards and built-in policies.

11 DirectAccess Providing seamless, secure access to enterprise resources from anywhere Provides seamless, always-on, secure connectivity to on-premise and remote users alike Eliminates the need to connect explicitly to corpnet while remote Facilitates secure, end-to-end communication and collaboration Leverages a policy-based network access approach Enables IT to easily service/secure/update/provision mobile machines whether they are inside or outside the network Available in Windows 7 and Windows Server 2008 R2

12 UAG and DirectAccess better together: Extends access to line of business servers with IPv4 support Access for down level and non Windows clients Enhances scalability and management Simplifies deployment and administration Hardened Edge Solution Always On IPv6 IPv6 SSL-VPN + IPv4 IPv6 or IPv4

13 Now lets deep dive into the features.

14 UAG In a Glance Web Application Publishing SSL VPN Layer 3 VPN SSL Network Tunneling, SSTP Enhanced Protection Edge Ready Terminal Services RemoteApps, RemoteDesktop, VDI DirectAccess Enhanced Authentication & Identity Unified Management Enterprise Readiness Interoperability

15 Array Array is a set of UAG machines which: Share the same configuration (trunks, applications) Managed as a unit Why? Increased Availability Increased Scalability Centralized Management UAG Array Manager External UAG array member How? Internal One node serves as the manager Other nodes are members Configuration is propagated from manager to members UAG array member

16 Integrated NLB Once array is setup, admin can easily configure and activate Windows NLB from within UAG console:

17 Remote Desktop (AKA Terminal Services) UAG seamlessly integrates Remote Desktop Gateway (RDG/TSG) to provide application level gateway for TS applications. RD/TS Client (MSTSC) HTTPS Tunnel IAG RDP RD Session Host (TS Server) RD/TS Client (MSTSC) RDP over HTTPS UAG + RDG RDP RD Session Host (TS Server)

18 Remote Desktop (AKA Terminal Services) Brings VPN, RemoteApps, RemoteDesktop and Web applications together: Same portal Integrated management Single sign-on Enhanced Security Granular policies based on client health: No anti-virus no driver sharing

19 Portal

20 Exchange Publishing ActiveSync UAG Client Access Server Outlook Web Access Internet HTTPS (443) Client Access Server Client Access Server OutlookAnywhere Authentication End-point health detection Enterprise Readiness Edge Ready Load Balancing SSO

21 UAG Beta Portal

22 More UAG Features SharePoint 2010, SharePoint 2010 Mobile Integrated SSTP support NAP integration SCOM Management Pack and more

23

24 Resources Microsoft Certification & Training Resources Resources for IT Professionals Resources for Developers

25 Complete an evaluation on CommNet and enter to win!

26 2009 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.