Finally, we have an excellent print resource for ISA/TMG with Microsoft Forefront Threat Management Gateway (TMG) Administrator’s Companion (Pro -Administrator’s Companion). The authors are Jim Harrison, who authored plenty of articles and blog posts on ISAServer.org beginning with ISA 2000, and Yuri Diogenes, a Microsoft Senior Security Support Escalation Engineer in the Forefront Edge Security Team.
The previous “go to” book was a 1000-page tome from Syngress that was so poorly edited as to make a searching engineer weep in frustration. The experience was only salvaged by the author, who created ISAServer.org and regularly answered forum posts.
This TMG Admin’s Companion is logically organized, well-written, informative and devoid of unrelated marketing literature and product surveys. Beyond the how-to instructions, the authors explain the technology, such as the various clients, malware inspection and url-filtering. I really liked the appendix sections on how the HTTP protocol and proxies work.
Administrator’s Companion is not perfect – for instance, it leaves out good coverage of arrays, is light on the various network topology options, and the coverage of migration from ISA was very superficial – but it is a very good start for configuring and supporting TMG. Use it with the online resources of Technet and ISAServer.org.