TMG replacement

[Bab L]

Hi.

A client needs needs needs needs replace their TMG.

Can a Cisco ASA firewall fully replace a TMG?

Can an ASA be used as a proxy?

If not, is there any firewalls out there that can replace TMG in its entirety?

Thanks in advance

[bsiapco]

Haralambos Lakatas.

Cisco ASA Next Generation Firewall can actually replace a TMG .Additional capabilities, including Application Visibility and Control (AVC), Intrusion Prevention (IPS), and Web Security Essentials.  Here is the link  http://www.cisco.com/c/en/us/products/security/asa-next-generation-firewall-services/index.html

 If you need further information please send me a message. Hope this helps!

[Bab L]

Thanks for that.

How about things like explicit proxy settings or proxy settings in general?

[bsiapco]

babislakatas.

TMG is still recommended for end device installation. However, Hardware security is still recommended for initial deployment. Is this for reseller to your client, by the way?

Send me an e-mail (bsiapco@cisco.com) for additional concerns.  

[Bab L]

Client wants to remove TMG all together. I guess the questions is: Can any firewall replace the TMG 100%?

[adawa]

Hello, babislakatas 

ISA/TMG Firewall is irreplaceable by a hardware Firewall, specially for spoof detection. Having both security solution is a good idea. However, hardware/Firewall security as initial line of defense on your network is recommended.