Forefront TMG Client
Hello Everyone:
I would like to introduce the new Forefront TMG Client (formerly known as Firewall Client).
As you might have noticed, we have changed the component’s name. This was done in order to emphasize the point that it is part of the Forefront family of products.
New functionality added:
- HTTPS Inspection notification: When a user visits an HTTPS site and Forefront TMG HTTPS Inspection is configured to notify users that HTTPS inspection is applied, the Forefront TMG Client will display a message balloon notifying the user that the SSL traffic is being inspected. (This feature can be disabled on the Forefront TMG server or on the Forefront TMG client)
- AD Marker Support: Forefront TMG Client now supports a more secure method of automatically discovering the Forefront TMG server by querying Active Directory. In addition, the new mechanism allows the administrator to configure different Forefront TMG servers for different Active Directory sites, thus improving the connectivity experience by allowing the Forefront TMG client to use the closest Forefront TMG server.
Note: by default, when the AD Marker is not available, the client will revert to the old methods. This behavior is configurable in the Forefront TMG Client control panel applet.
Forefront TMG Client will continue to support the following features:
- Group- or User-based policies based for non-Web proxy TCP and UDP traffic.
- Support for complex protocols without the need for an application filter.
- Simplify routing configuration for large organizations.
- Auto discovery, done by fetching the information from, DNS, WINS or DHCP servers
Please use the following tables to determine scenario and compatibility support limitations.
Operating system support
The following table summarizes the operating system support for Forefront TMG Client and Firewall client software.
Operating system |
Forefront TMG Client |
Firewall Client 2006 (Downloadable Version) |
Firewall Client 2004 |
Firewall Client 2000 |
Windows® 7 /Windows Server 2008 |
Supported |
Supported |
Not supported |
Not supported |
Windows Vista (all service packs) |
Supported |
Supported |
Not supported |
Not supported |
Windows Server 2003 with Service Pack 1 (SP1) |
Supported |
Supported |
Supported |
Supported |
Windows XP (all service packs) |
Supported |
Supported |
Supported |
Supported |
Windows 2000 |
Not supported |
Supported |
Supported |
Supported |
Client / Server Compatibility
The following table summarizes compatibility between Forefront TMG and ISA servers, and Forefront TMG and ISA clients.
Forefront TMG server |
TMG MBE |
ISA Server 2006 |
ISA Server 2004 |
ISA Server 2000 |
|
Forefront TMG Client |
Compatible |
Compatible |
Compatible |
Compatible |
Not Compatible |
Firewall Client 2006 |
Compatible |
Compatible |
Compatible |
Compatible |
Compatible |
Firewall Client 2004 |
Compatible |
Compatible |
Compatible |
Compatible |
Compatible |
Firewall Client 2000 |
Not compatible |
Not compatible |
Compatible |
Compatible |
Compatible |
Written by: Alon Yardeni, Program Manager
Reviewed by: Jim Harrison, Meir Feinberg, and Yaron Zakai Or.