Forefront TMG 2010 has been Discontinued !!!

Finally it was announced and Microsoft has decided to discontinue some of its very popular products such as Forefront Threat Management Gateway 2010 together with some others listed below:

  • Forefront Protection 2010 for Exchange Server (FPE)
  • Forefront Protection 2010 for SharePoint (FPSP)
  • Forefront Security for Office Communications Server (FSOCS)
  • Forefront Threat Management Gateway 2010 (TMG)
  • Forefront Threat Management Gateway Web Protection Services (TMG WPS)

It also should be mentioned that among all of these, Forefront Protection 2010 for Exchange Server (FPE) will still be there but will be bound to Office365 and will be called Exchange Online Protection.

I still remember the rumor about a year ago about this decision but it was not confirmed then. Now that is is confirmed, there are still questions left on why Microsoft has made this strategic decision especially the decision to discontinue TMG which is a very popular product. It is now being used by a lot of companies as a gateway software for so many different purposes. It was the successor of popular Microsoft ISA Server 2006 and now all have been discontinued to be any further developed.

There still will be spport for these products and you can get to know more about it in the table below, however there is not yet enough information on what type of support it is going to be. Whether or not Microsoft is going to release updates on the attack signatures in TMG is yet to be released:

You want to learn more? Check out my new book below and have access to great and practical tutorials and step-by-step guides all in one book:

To get more information about the book click on the book below:



12 thoughts on “Forefront TMG 2010 has been Discontinued !!!

  1. More from Microsoft here:

    We wanted to clarify some details around the discontinuation of Forefront TMG to help address many of the questions we’ve seen posted in the comments section.

    First, it is important to note that while Forefront TMG is being discontinued, it will continue to be supported in mainstream support through April 14, 2015 and in extended support through April 14, 2020. When and how a customer transitions to a replacement solution will depend on how the customer is using TMG today. Customer use scenarios vary, but these general guidelines should help:

    • For customers using TMG for caching, secure web gateway (forward proxy), and firewall, we recommend that, prior to April 14, 2020, customers examine the many vendor solutions available in market today that offer comparable features to the TMG product. Microsoft does not plan to transition this functionality to any other Microsoft products.

    • For customers using TMG for reverse proxy, transitioning to Forefront UAG is an option. Most web publishing scenarios that are supported by TMG can be published by UAG, though specific functionality may not be identical. For customers who do not want to transition to Forefront UAG, customers should plan on transitioning to an alternative vendor solution prior to April 14, 2020.

    • For customers using Forefront TMG Web Protection Services, we recommend that customers examine the many vendor solutions available in market today that offer comparable reputation services by Dec. 31, 2015. This product will no longer receive updates starting January 1, 2016.

    We hope that these general guidelines provide additional clarity. Please continue to contact your Microsoft account teams or partner managers with any questions about your specific scenarios.


    The Forefront TMG Team

  2. We purchased two TMG appliances last year but have yet to implement them. Now our reseller is telling us he can no longer sell the Web Protection subscription!

    WTH are supposed to do now!

    • Hi Joe… I understand your worries… I have seen similar cases like this before… I think this is something that you will have to deal with anyways. You can either change the appliance or just totally forget about the web protection. Have you ever tried contacting Microsoft? They might be able to help you. I have seen cases that Microsoft found a workaround for the customers.

  3. Its still in-progress but I’m keeping my expectations low.

    Is it possible to shoe-in the same functionality with a tird-party solution?

    • It really depends on your environment and of course your budget… How much do you want to spend really? Can you afford another security appliance or you want to sort it out with some software-based solutions?

      • Well, we spent a boat-load on two of these brand new appliances already so it would be nice to find a software solution that would last until these are EOL at least.

        Spent some time on the phone with my reseller and they are still trying to hound MS to make an exception for us.

        It is such a shame that they killed such a great product!

  4. The only thing that comes to my mind is something linux based like “Snort” as your IDS integrated with some firewall like “IPTables” acting as IPS to protect you against web threats… If you can configure it right, it’s way better than TMG even… If you feel like it is too late to learn Snort, you can always pay someone to configure it for you because there are many Snort experts out there you can hire…

  5. Have you had any experience with GFI, Kaspersky or other tird-party anti-v?

    I think they make add-ins for TMG that provide the same functionality?

    We are also looking at upgrading our IPS but were hoping to use that as an additional separate layer.

Leave a Reply

Your email address will not be published. Required fields are marked *

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>