15-Sep-2018 08:58
Hello Team,
We have TMG 2010 in which we have firewall policies and pre-authentication configured for some of the applications. Can anyone suggest what would be the best product in F5 for this.? Also, what tool can be used to migrate policies in TMG to F5.?
15-Sep-2018 09:41
In the past I've done a TMG to F5 BIG-IP migration and in this specific case both the LTM and APM modules where required. This TMG was used to deliver Microsoft Exchange, Microsoft SharePoint and a bunch of other applications. Typical functionality required in this case was Reverse Proxy, Load Balancing, Multi Factor Authentication, Step Up Authentication and Single Sign On.
There was no tool used to migrate these services. Just builded the BIG-IP configuration from scratch.
I guess for the firewall application one would also need AFM. There is quite a bit information on the internet available about TMG to F5 BIG-IP migrations. For example see:
https://www.f5.com/pdf/deployment-guides/f5-tmg-replacement-dg.pdf http://interact.f5.com/rs/f5/images/Email%20%234%20Offer%203%20microsoft-forefront-tmg-dg.pdf