Il est toujours très intéressant de voir comment une “technologie” (et non un produit) peut au fil du temps devenir moins prioritaire, puis tout à coup… en raison de l’actualité, devenir de nouveau le sujet chaud du moment. Plus précisément, « on avait...

For all the good moments we had together. Steve Ballmer support Microsoft emplyees bone marrow registration drive video :

In the last past weeks, I had several meetings with customers about remote access in general, and had the opportunity to present Direct Access. Not too much on the protocol angle but more on the vision of DA. There are always 2 questions that are asked...

Sometimes, you search an email.. and you don’t find it. Outlook sais it is indexing.. but you don’t know where you are in this process. You can download this gadget : http://gallery.live.com/liveItemDetail.aspx?li=45c441a6-edbc-454d-9262-d264728d6a3a&bt...

This week, we had a lot of “clouds” in Paris (France). The Microsoft Tech Days event proposed during 3 days more than 300 presentations to more than 15.000 customers. Of course IDentity and Access  (IDA) was part of it. I had the pleasure to run...

A few weeks ago, I co-worked on a case with a friend of mine Hicham. He is working for a Microsoft Partner in France, and worked a lot on UAG. He wrote a blog in order to help the community  about SSO in UAG : http://blogs.technet.com/b/fesnouf/archive...

If you are looking for a book on UAG, this is definitely the one. I personally know the authors, and they are more than “expert” on this subject. Check this link : http://www.amazon.com/o/asin/1849681627 Congratulation for this hard work !!!!

  Merry Christmas !!

One of my key partner wrote this nice blog about this scenario. Don’t miss it : http://ahmedhusseinonline.com/2010/11/publishing-scvmm-ssp-using-uag-part-1-of-3/ http://ahmedhusseinonline.com/2010/12/publishing-scvmm-ssp-using-uag-part-2-of-3/ http:/...

France has been stuck yesterday because of the snow. It started to snow a lot around 2 PM and paralyzed part  of the country the rest of the day. Paris area was totally stuck. As a good example, I left “la defense” (North West of Paris) at 4 o’clock...

A few weeks ago, I had the opportunity to write a blog about a very nice experience I had – during a presentation in Copenhagen – where hacker tried to fake an identity and tried to force me via communicator to install a malware on my machine. I wrote...

Hi all,   This is a very frequent question from customers and partners. How can I discover and train myself on IDentity and Access (IDA)products ? Here is a link of books and online training for that. Hope this helps !   ForeFront Identity Manager...

    Part 1: the problem. With UAG, you can provide remote access towards many types of applications:   ·          Web applications : The “client” is in this case a simple browser, and dialog with...

Note from Fred ESNOUF : This article has been written by Hicham Bardawil ( Hicham.Bardawil@vNext.fr ) UAG expert working for Vnext. I am just hosting his article since he used some of my previous posts to finalize his configuration. Congratulations Hicham...

The context/purpose of this blog It is always interesting to use real world example s to explain security, especially how “bad guys” manipulate people to steal information. This is a true story, “My” True story. This morning, I was listening to a very...

  This year, I will be at Tech Ready - a Microsoft internal event - giving a few sessions about Unified Access Gateway. One of them will be about Web Single Sign on , especially how UAG – using the internal engines and   customization – can...

Most of the time, when running a demo or POC, your environment is not connected to the internet. Maybe you have noticed that in this case, the demo is a bit slow . As an example, the first connection to UAG (after a long period or inactivity, or reboot...

When you connect an application through UAG, all the user activity will be logged by the system. The reason is that it is not only a “technical” gateway (that will pass back and forth the HTTP requests), but an “application layer” one (that will also...

First of all, I would like to thank Matthieu Martineau ( matthieu.martineau@piservices.fr ) (Gold Partner, MCSE and MCT) with whom I had the opportunity to investigate some of the breaking scenarios I mention at the end of this post In the wide...

Tracing a product is always a good thing. First , it helps you to understand how it works internally and so enhance your own skills… second , it helps you to understand why such expected feature or configuration is not working fine. With IAG (previous...

The purpose of UAG is to provide “remote access” (more an employee term) and “application publishing” (more a partner or customer term). This means that UAG has to be ready to “talk” to people that are not IT specialists at all. Security policy...

When you connect UAG, in an internal phase called “install and detect” the UAG client will download from the UAG server a file named Detection.VBS. This Detection.vbs file contains all the “VBS” code that will analyze the client machine. This...

Workstation analysis and security policy are the key features proposed by UAG to provide security at the application layer. Whereas firewall will operate at the network layer (filter by IP or TCP Port range), the application layer will look at “what”...

This December, a lot of changes happened in the Microsoft security portfolio. After more than 1 year of strong investments, Microsoft launched the “2010” versions of both “ISA” and “IAG” : * IAG Server becomes now “Forefront Unified Access Gateway...

Gridsure, a UK company, has created a very nice way to provide strong authentication. Strong authentication combines what you know (login, password) and what you have (something physical). In the long list of strong authentication mechanisms we know Smartacards...