06-06-2014 04:08 AM
Hi,
I will carry all of the owa and outlook anywhere rule on TMG to Cisco ACE WAF.
Are there anyone uses Cisco ACE WAF with EV?
As you know we need TMG for link translation domain.local to domain.com.
thanks...
06-06-2014 04:35 PM
Hi KG,
integration is not completely accurate. This is simple feature which is reverse proxy provided by most modern application layer firewalls to meet the security requirement of NOT having to place your web servers with internal data or AD domain joined on the DMZ. Most application f/w support this ext ip/ext DNS -> int ip /dns proxying.
if you currently have this setup than I'm sure you know the high level of it which is detailed here :
http://www.symantec.com/business/support/index?page=content&id=TECH63250
Get your Cisco network team to migrate over the current TMG rules over. I googled the Cisco ACE WAF and looks to fit the bill as a full reverse proxy including the usual features like SSL and url filtering /rewrite.
06-10-2014 12:31 AM
Hi,
Yes we just need reverse proxying, i know the isa,tmg product.
Exchange and EV Rules will be carry on to cisco.
I just want to know that are there anyone uses cisco WAf - EV for reverse proxy and it works without any problem?
thanks...
06-10-2014 05:16 AM
KG,
Just wanted to add that when I googled Cisco ACE I found out is facing the same fate as TMG
http://blogs.technet.com/b/server-cloud/archive/2012/09/12/important-changes-to-forefront-product-roadmaps.aspx
http://www.cisco.com/c/en/us/products/collateral/application-networking-services/ace-web-application-firewall/end_of_life_c51_609818.html
other products in that segment
http://ww3.radware.com/clients/radware/uploads/Taiwan/Gartner_ADC_2013.pdf?jujrtyghfud190939a1899653a791a3018a5855