Microsoft 50402 Training

Implementing Forefront Unified Access Gateway 2010

Implementing Forefront Unified Access Gateway 2010 M50402

Course Title: Implementing Forefront Unified Access Gateway 2010

Course Code: M50402
Version: A
Level: 300
Duration: 3 Days

Course Overview

The Implementing Forefront Unified Access Gateway 2010 M50402 instructor-led training course has been designed to prepare candidates to design and deploy remote access solutions using Microsoft Forefront Unified Access Gateway 2010 (UAG). Forefront UAG provides organisations with unparalleled flexibility in providing access to network resources (such as Web sites and internal applications) with granular access control, custom content protection, and endpoint validation. Forefront UAG also integrates with DirectAccess, a new Windows 7 technology that provides seamless remote access to all corporate resources without connecting to a virtual private network.

Target Audience

Candidates who should consider attending the M50402 Microsoft training course include architects, consultants, network administrators, and technical sales professionals who are responsible for selling, designing, and deploying edge access solutions for enterprises. These IT security and infrastructure specialists should have experience with Windows networking and authentication protocols. Experience with IPv6 protocol would be an advantage but is not required.

Course Objectives

On successfully completing the M50402 course candidates will be able to:

• Install and configure Forefront UAG as a standalone server or an array member

• Publish Microsoft Exchange Server, Microsoft Office SharePoint Server, and Remote Desktop Gateway applications to external users

• Configure Forefront UAG to authenticate and authorise users, and enforce security policies on clients
• Use Forefront UAG as a gateway for DirectAccess clients
• Understand the design and deployment considerations when building an enterprise access solution using Forefront UAG

Course Prerequisites

Candidates attending the M50402 Microsoft training course should have a solid understanding of Windows networking. Experience with IPv6 would be an advantage but not required. Candidates are also required to have a working knowledge of Active Directory, LDAP, and RADIUS authentication as well as basic understanding of Microsoft Exchange Server 2007 and Microsoft Office SharePoint Server 2007.

Testing and Certification

There are currently no exams or Microsoft Certification directly associated to this course however this course may assist in preparing candidates for other exams that are closely associated with this technology.

Course Content

Module 1: Forefront UAG Overview

In this module candidates will learn about the features and capabilities of Forefront UAG, and the role it plays in enabling usage scenarios that are part of the Microsoft Business Ready Security strategy.

Lessons:

• Microsoft Business Ready Security Strategy (BRS)
• Forefront Unified Access Gateway Architecture
• Licensing and Availability

After completing this module, candidates will be able to:

• Understand how Forefront UAG fits into the Microsoft Business Ready Security strategy solutions
• Describe the Forefront UAG solution and internal architectures
• Provide customers with licensing options for Forefront UAG

Module 2: Forefront Unified Access Gateway Setup and Upgrade

In this module candidates will learn about setup and configuration tasks for Forefront UAG, and how to migrate from Microsoft Intelligent Application Gateway 2007 (IAG) to Forefront UAG.

Lessons:

• Installing Forefront UAG
• Initial Configuration

Lab: Install Forefront Unified Access Gateway 2010

• Install Forefront UAG 2010
• Configure the initial settings using the Getting Started Wizard

After completing this module, candidates will be able to:

• Describe the Forefront UAG setup process
• Explain how customers can migrate from IAG to Forefront UAG

Module 3: Forefront UAG Portal

In this module candidates will learn about the concept of a trunk in Forefront UAG, and how the product uses trunks to enable remote users to connect to internal applications. Candidates will also learn about the role of the Forefront UAG portals as front end interfaces for these users, and how Forefront UAG can be customised during deployments.

Lessons:

• Trunks and Portals
• Portal Customisation
• Client Detection

Lab: Create and Configure a Portal Trunk

• Create a HTTPS trunk in Forefront UAG
• Configure an Active Directory authentication repository

After completing this module, candidates will be able to:

• Understand how Forefront UAG uses trunks and portals to provide access to internal resources
• Explain how to customise the Forefront UAG portal look and feel
• Describe how Forefront UAG detects the remote endpoint capabilities and how to customise this process

Module 4: Publishing Web Applications

In this module candidates will learn how to configure Forefront UAG to enable remote endpoints to have access to internal Web applications, how to enable access to Microsoft Exchange and Microsoft SharePoint, and how to deploy federation using Active Directory Federation Services (AD FS).

Lessons:

• Web Publishing Overview
• Publishing Microsoft Exchange
• Publishing Microsoft SharePoint
• Deploying Federation with AD FS

Lab: Publishing Exchange Applications

• Configure Outlook Web Access (OWA) publishing using the OWA look and feel
• Configure OWA publishing inside the Forefront UAG portal
• Publish Outlook Anywhere and Exchange Autodiscover

After completing this module, candidates will be able to:

• Publish Web applications to the Internet using Forefront UAG trunks
• Enable remote client access to Microsoft Exchange and Microsoft SharePoint services
• Configure Forefront UAG to use federation for portal and application access

Module 5: Remote Desktop Gateway Publishing

In this module candidates will learn how Forefront Unified Access Gateway (UAG) provides access to published RemoteApps and Remote Desktops by integrating a Remote Desktop Gateway (RD Gateway) to provide an application-level gateway for Remote Desktop Services (RDS) and applications.

Lessons:

• Remote Desktop Publishing Overview
• Deploying RD Gateway Publishing

Lab: Publishing Remote Desktop Services

• Publish RemoteApp applications using the Forefront UAG portal
• Publish a predefined Remote Desktop

After completing this module, candidates will be able to:

• Explain the benefits of using the Remote Desktop Gateway (RD Gateway) publishing feature
• Describe how Forefront UAG integrates with RD Gateway
• Explain how to configure Forefront UAG to publish RemoteApps, predefined Remote Desktops, and user-defined Remote Desktops

Module 6: Remote Network Access

In this module candidates will learn how remote access can be configured with the corporate network using the legacy Network Connector application or the Secure Sockets Tunnelling Protocol (SSTP).

Lessons:

• Remote Network Access Overview
• UAG/SSTP Integration Architecture
• Configuring Remote Network Access

Lab: Remote Network Access using SSTP

• Configure remote network access using SSTP
• Publish remote network access in the Forefront UAG portal

After completing this module, candidates will be able to:

• Explain the different technologies used by Forefront UAG to enable remote access to the corporate network
• Describe how Forefront UAG integrates with Forefront TMG and Windows to provide SSTP VPN access to Windows 7 clients
• Configure Forefront UAG to provide remote network access using SSTP and the Network Connector

Module 7: IPv6 and IPv6 Transition Technologies

In this module candidates will learn about the IPv6 protocol used by Forefront UAG DirectAccess, and the technologies associated with transitioning from IPv4 to IPv6 networking.

Lessons:

• IPv6 Overview
• IPv6 Transition Technologies

Lab: IPv6 and ISATAP

• Use IPv6 link-local addresses for local network connectivity
• Deploy an ISATAP router in an intranet

After completing this module, candidates will be able to:

• Understand the limitations of the IPv4 protocol, and the benefits provided by IPv6
• Describe the addressing, routing, and name resolution characteristics of the IPv6 protocol
• Explain how ISATAP, 6to4, Teredo, and NAT64/DNS64 can be used to enable IPv6 connectivity over IPv4 networks

Module 8: DirectAccess

In this module candidates will learn about DirectAccess and how it is enabled by Forefront UAG to provide seamless network access to Windows 7 clients.

Lessons:

• DirectAccess Overview
• DirectAccess Solution Components
• Planning a DirectAccess Deployment
• Deploying DirectAccess Using Forefront UAG

Lab: Deploying DirectAccess

• Prepare the infrastructure requirements for DirectAccess
• Configure DirectAccess using Forefront UAG

After completing this module, candidates will be able to:

• Understand the benefits provided by DirectAccess to users and IT organisations
• Describe the DirectAccess architecture and its components
• Understand the requirements and design decisions involved in a DirectAccess solution using Forefront UAG
• Configure DirectAccess using Forefront UAG

Module 9: Endpoint Security Policies and NAP Integration

In this module candidates will learn about policy evaluation and enforcement technologies for the Forefront UAG endpoints.

Lessons:

• Endpoint Policies
• Network Access Protection Integration

Lab: Endpoint Policies and Network Access Protection

• Use the Endpoint Policies with a Forefront UAG portal application
• Configure Network Access Protection (NAP) with Forefront UAG DirectAccess

After completing this module, candidates will be able to:

• Explain how Forefront UAG can enforce endpoint policies
• Configure Forefront UAG to use NAP for policy validation

Module 10: Array Management

In this module candidates will learn how Forefront UAG uses arrays to scale out to large deployments-improving the scalability and availability of the solution while reducing management overhead.

Lessons:

• Forefront UAG Array Management Overview
• Deploying and Operating Forefront UAG Arrays
• Network Load Balancing Integration

Lab: Configuring Forefront UAG Arrays

• Install an additional Forefront UAG server
• Configure a Forefront UAG array and perform post-array configuration tasks

After completing this module, candidates will be able to:

• Explain the benefits provided by using Forefront UAG arrays
• Describe the array management architecture, and the tasks involved in creating and managing an array
• Explain how the Network Load Balancing feature of Windows Server is integrated into Forefront UAG

Module 11: Enterprise Deployment and Troubleshooting

In this module candidates will learn about the considerations involved in designing, deploying, and troubleshooting an enterprise access solution based on Forefront UAG.

Lessons:

• Deploying Forefront UAG in Enterprise Environments
• Supporting and Troubleshooting Forefront UAG

After completing this module, candidates will be able to:

• Describe the process of designing and deploying Forefront UAG in an enterprise environment
• Describe the tools and best practices for troubleshooting issues with Forefront UAG

PLEASE NOTE: Every effort has been made to ensure the accuracy of all information contained herein. IT Help and Support Centre Ltd makes no warranty expressed or implied with respect to accuracy of this information, including price, product editorials or product specifications. IT Help and Support Centre Ltd or its suppliers shall not be liable for incidental, consequential or special damages arising from, or as a result of, any electronic transmission or the accuracy of the information contained herin, even if IT Help and Support Centre Ltd has been advised of the possibility of such damages. Product and manufacturer names are used only for the purpose of identification.