A little intro - I am not into security or access by trade I have a background in Exchange and wound up being assigned this task because I once supported Proxy 2.0. I was asked to use TMG to complete this but I am not sure its the right tool for the scenario. I have some training lined up but before I waste days of my time learning about TMG could someone let me know if this scenario fits the product. My sincere thanks in advance for your advice.
This large company has many sites and domains globally. They want users that login from domain A (regardless of physical site) to have access to resources in the primary corp domain. Of course there are firewalls separating many of these users from the corporate domain. What they want is a solution that 'proxies' their connections into the corp domain. Can TMG (or another product?) recognize that someone is currently logged into Domain A and allow them to automatically access resources in the Corp Domain?
Customer statement : "this is an internal network that another region would not have direct visibility to due to firewall rules not allowing all global IP networks. For those regions that do not have direct IP access through the perimeter firewall, they should go through a proxy and this proxy would give them visibility into the network as if they were at that location. It will allow 'Domain A' users and reject users from any other Domain."
What I worry about is it seems TMG / UAG are designed to publish web sites, exchange, etc or to allow use via Direct Access from another 'entity' and I think UAG / Direct Access is out because they are not 100% Windows 7 and still have XP clients. I need these people to be able to use all resources not just a published app or web space. This is why I decided to come to the forums, it seems to me that there should be a way to enable this in AD easier than a complicated 'proxy' solution.
Thanks again.