About Forefront TMG Clients

Forefront TMG supports three types of clients:

The following table compares the Forefront TMG clients.

Feature SecureNAT client Firewall client Web proxy client
Installation required Some network configuration changes are required Yes No, but requires configuration of the Web browser
Operating system support Any operating system that supports Transmission Control Protocol/Internet Protocol (TCP/IP) Only Windows platforms All platforms, but by way of the Web application
Protocol support Requires application filters for multiple-connection protocols All Winsock applications Hypertext Transfer Protocol (HTTP), Secure HTTP (HTTPS), and File Transfer Protocol (FTP) (download requests)
User-level authentication Only the IP address of the user is sent to the Forefront TMG computer. The Firewall Client software sends the user's credentials to the Forefront TMG computer with each request. User credenticals can be supplied in response to requests from Forefront TMG.
Server applications No configuration or installation required Requires configuration file N/A

Web proxy clients can run on Firewall client computers and on SecureNAT client computers. If the Web application on the computer is configured explicitly to use a Forefront TMG computer, then all Web requests (HTTP, HTTPS, and FTP) are sent to the Forefront TMG Web proxy.

This section contains the following topics:

Send comments about this topic to Microsoft

Build date: 11/30/2009

© 2008 Microsoft Corporation. All rights reserved.