Try our new research platform with insights from 80,000+ expert users
Microsoft UAG [EOL] Logo

Microsoft UAG [EOL] Reviews

Vendor: Microsoft
4.1 out of 5
Leave a review

What is Microsoft UAG [EOL]?

Forefront Unified Access Gateway (UAG) provides remote client endpoints with access to corporate applications, networks, and internal resources via a Web portal or site. Forefront UAG product documentation is organized into content categories. Use the topics in each category to help you design, plan, deploy, and administer your Forefront UAG servers.
Get the SSL VPN Buyer's Guide and find out what your peers are saying about Microsoft UAG [EOL] and more!
Buyer's Guide
SSL VPN
July 2025
Get the category report
Helped 864,703 peers since 2012

Featured Microsoft UAG [EOL] reviews

Read more reviews

Learn more about Microsoft UAG [EOL]

Microsoft UAG [EOL] was previously known as UAG, MS UAG [EOL].

Microsoft UAG [EOL] customers

Topocart, AAG, GeoAir, Blue Skies Consulting, Hiparc Geotecnologia, Peace Map

Related questions

  • 414
What firewall to choose to support 500-1000 concurrent SSL VPN users?
  • 37
What's right for me? Fortinet or Citrix?
  • 148
What is the difference between "data protection in transit" vs "data protection at rest"?
  • 213
What are the best practices to prevent a Brute Force attack via remote access?
  • 3
When evaluating SSL VPN, what aspect do you think is the most important to look for?
  • 11
What is the best appliance for SSL VPN and a fat client?
  • 26
What tools do you use to make a remote work more efficient?
  • 49
Which offers a better VPN: Meraki or Azure?
  • 4
Why is SSL VPN important for companies?

Product Categories

Product Categories
SSL VPN
 

Microsoft UAG [EOL] reviews

Sort by:
PeerSpot user
Senior Consultant at Unify Square
Verified user of Microsoft UAG [EOL]
Feb 27, 2018
Forefront Unified Access Gateway delivers anywhere access to corporate resources in secure and highly customizable ways
*Review updated on April 17, 2014 As you can read on the Microsoft TechNet blog ( http://bit.ly/J2Jcni ) UAG has entered the final part of its lifecycle. "Mainstream support will continue through April 14, 2015, and extended support will continue through April 14, 2020." The features you used in UAG are now available in Windows 2012 R2 using the operating system's DirectAccess and Web Application Proxy functionalities. "Customers will be granted a Windows Server 2012 Standard server license for each UAG server license with active Software Assurance to allow them to make the transition." Pros: Consolidate remote access from different networks, users and devices into a single product. UAG is able to work with all the most used browsers and operating systems (including Android and IOS with Service Pack 2) Powerfull policies and tools to manage and monitor connections and activities. Rules are not too difficult to create and manage A lot of possibilities to customize the product and the aspect of UAG to be compliant with your company's guidelines Cons: Direct Access is something that is now available also in Windows 2012 At the moment (01/05/2013) we are waiting for Service Pack 3 of UAG to interact in the right manner with Exchange 2013, Lync 2013 and do on. The ForeFront TMG installation made by UAG is something you have not to modify or use and that is a pitty (it is there only to protect the server where UAG is installed). UAG is a really good product and it is not difficult to use if you compare it with other softwares / hardwares that deliver similar features. Given the fact that other product of the ForeFront family are going out of support, if you want a Microsoft product for publishing and remote access, UAG is the only choice you will have in the next year (years ?)
*Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Read full review (313 words)
PeerSpot user
Senior System Engineer with 1,001-5,000 employees
Verified user of Microsoft UAG [EOL]
Jan 26, 2015
Microsoft RAS and UAG

What is most valuable?

  • The capability of employees to work from anywhere in the world on the corporate network
  • Only a laptop with an internet connection and correct username/password are enough to be connected

How has it helped my organization?

Employees can work from home, branch offices or anywhere in the world together with employees in the firm.

*Disclosure: My company does not have a business relationship with this vendor other than being a customer.
Read full review (339 words)
Buyer's Guide
SSL VPN
Download free report
Find out what your peers are saying about SSL VPN. Updated July 2025
864,703 professionals have used our research since 2012.
PeerSpot user
Engineer with 1,001-5,000 employees
Verified user of Microsoft UAG [EOL]
    Nov 13, 2013
    The dangers of ISATAP

    We recently started a trial of Microsoft's UAG (Universal Access Gateway) product. It's a cool 'always on' VPN solution that detects when you laptop is off the corporate network and connects you via a some fancy VPN technology without you even knowing it. One interesting aspect is that it runs on IPv6.

    For most companies (ours included) IPv6 is not something we have embraced. It's hard to have a network team who have spent decades becoming experts in TCP/IP and have them relearn a whole new technology and implement it. It's just not high on our list (I digress) so...

    Perfect Storm Component (1): We don't even route IPv6 on our network

    Our Windows 2008 servers all have IPv6 installed and bound to the NICs (the default configuration). Microsoft say this is best practice since they have declined to retro test any of the current or future technologies against a platform that has IPv4 enabled and IPv6 disabled.

    Perfect Storm Component (2): We have IPv6 enabled on all our servers.

    When an IPv6 stack comes on line it will perform a solicitation broadcast (IPv6 Broadcast) and typically in our environment that falls on deaf ears, thus the only IPv6 interface that is online is a loopback interface. Enter UAG. Since the UAG product uses IPv6 it needs a way of allowing the IPv6 clients on the Internet a way of talking to IPv4 servers, it does this by installing an ISATAP server which effectively allows IPv6 and IPv4 systems to talk to each other by gluing IPv4 headers onto IPv6 packets. The moment that comes on line the IPv6 solicitation broadcasts are received by ISATAP and it starts handing out addresses (only analogous to DHCP). Two things then start to occur. (a) All our servers begin registering AAAA records in DNS and (b) the nodes of our production clusters start to perform their health checks of IPv6.

    Perfect Storm Component (3): Servers, including clusters, start using IPv6 for DNS and cluster health checks.

    At this point I am pissed off, or at least I would have been if I had known what was going on. The introduction of the UAG product and consequently ISATAP had made a change to our entire enterprise at a profound level and all without our knowledge.

    And then it happens...

    Perfect Storm Component (4): The UAG product breaks.

    Now the time bomb has started to tick, with UAG down, servers can no longer communicate via IPv6 so they are unable to renew their IP addresses in DNS. The countdown to their DNS scavenge time has begun and 7 days later their IPv6 AAAA records get deleted from DNS. That's OK for most servers, but for the clusters, they try to perform their regular health check and 0-1.2 seconds after their AAAA records are deleted the cluster health check fails and the cluster falls over.

    *Disclosure: My company does not have a business relationship with this vendor other than being a customer.
    Read full review (483 words)
    PeerSpot user
    Senior Manager of Engineering with 1,001-5,000 employees
    Verified user of Microsoft UAG [EOL]
    Jan 21, 2013
    Secure and safest access gateway for internal networks

    What is most valuable?

    Very safe and secure, the ability to use factor 2 authentication, by integrating it with Pinsafe - was the main reason why we choose UAG. All configuration is done by the UAG console allowing easy administration.

    What needs improvement?

    Trunks are slightly difficult to configure. Two Networks card have to be configured to use UAG on different subnets (Can be tweaked to use one subnet however not supported by Microsoft).
    *Disclosure: My company does not have a business relationship with this vendor other than being a customer.
    Read full review (162 words)
    PeerSpot user
    Manager of Operations at a tech company with 51-200 employees
    Verified user of Microsoft UAG [EOL]
    Jul 4, 2012
    UAG is a breakthrough in SSL VPN technology. It provides better security for remote access VPN for networks of similar standards.

    What is most valuable?

    With a need of absolute security in SSL VPN, Microsoft has introduced UAG. Forefront Unified Access Gateway is a software solution which provides better security in SSL VPN. Though UAG is bit different than other SSL VPN software, the software has some features which resemble SSL VPN. One of the important features of the software is a firewall facility provided in Application Layer. There is also better prevention in SQL injection for URL based applications. The URL syntax checking facility provided with the software is quite impressive. IPV6 based access technology has reduced the requirement of additional gateway setup in case of remote access VPN.

    What needs improvement?

    Though UAG is a breakthrough in SSL VPN, it still lags in some fronts, like authentication control process in VPN. In some cases where standard schema is not followed for a server, UAG seems to not communicate well. UAG also requires Microsoft Windows Server 2008 R2 x64 platform. This is a setback for users of x86 platforms. UAG also faces some difficulties with communication through 802.1x authentication protocol in radius mode. Other than standard Active Directory group, UAG doesn't communicate with external groups in case of a remote VPN.
    *Disclosure: My company does not have a business relationship with this vendor other than being a customer.
    Read full review (285 words)
    PeerSpot user
    Director of IT at a tech company with 51-200 employees
    Verified user of Microsoft UAG [EOL]
    Jun 29, 2012
    Forefront Unified Access Gateway (UAG) is a remote access solution that provides a gateway for managed and non-managed endpoints to access corporate applications and resources.

    What is most valuable?

    - UAG makes it easier for organizations to deliver secure remote access to their applications and resources, and improve employee and partner productivity. - Protect IT assets through fine-grained and built-in access policies that provide access to sensitive data, based on identity and endpoint health. - Consolidate remote access infrastructure and management. - Simplify deployment and ongoing tasks through wizards and built-in policies. - Reduce support costs by delivering a simplified connectivity experience for users.

    What needs improvement?

    - Cross site single sign-on, not working between two UAG servers. - It is not possible to use the Network Connector application (a form of VPN) when Forefront UAG is configured as a DirectAccess server.
    *Disclosure: My company does not have a business relationship with this vendor other than being a customer.
    Read full review (261 words)
    PeerSpot user
    Manager of Data Center at a insurance company with 51-200 employees
    Verified user of Microsoft UAG [EOL]
    Jun 26, 2012
    Best tool for remote workers with diverse operating systems

    What is most valuable?

    1. Seamless connectivity 2. It supports SharePoint publishing 3. It is relatively cheap when licensing 250 or more simultaneous users 4. UAG incorporates DirectAccess facilities. 5. It is secure and safe.

    What needs improvement?

    1. You cannot implement UAG on a single server. This makes it not ideal for small businesses 2. UAG needs expertise to configure. 3. You can’t share the UAG server with any other applications. When Microsoft announced DirectAccess, we were very happy to see a solution that will overcome VPN dial-in dial-out lapses. However, we were discouraged when we discovered that DirectAccess requires all the client computers to be running on Windows 7 Ultimate or Enterprise edition, and our company doesn’t have the resources to upgrade all our systems. This became an issue as our VPN solution is not living up to our expectations.Our research shows that Forefront Unified Access Gateway (UAG) can be a remedy.
    *Disclosure: My company does not have a business relationship with this vendor other than being a customer.
    Read full review (275 words)