The Microsoft Forefront UAG 2010 Administrator’s Handbook became available. This book is a must have for every UAG 2010 administrator – complete and comprehensive with a lot of deep technical details around the product. Ben and Ran are doing a great job sharing their long lasting experience with us.
Check it out …
This KB article might interest you when publishing OWA in Exchange Server 2010 SP1 by using Forefront UAG: http://support.microsoft.com/kb/2444842.
UAG SP1 is out supersedes the UAG post RTM updates. In addition to the UAG SP1 it is recommended to install TMG SP1 and TMG SP1 Update 2.
Before installing TMG SP1 you should read the TechNet article “Installing Forefront TMG SP1 on Forefront UAG”.
Are you running UAG in an isolated environment or is UAG blocked from accessing the internet? If so, you may experience delayed response times when logging on to UAG or when accessing the UAG portal.
A possible root cause of the problem might be failed signature certificate verifications because of a missing certificate revocation list (CRL). Several assemblies on your UAG computer are signed and Windows will verify the signature before executing the files. The certificate verification process performs a certificate chain building with CRL checking. If the CRL is missing, a timeout of 15 seconds (default) occurs until the system is responding back. For more information see the TechNet whitepaper Troubleshooting Certificate Status and Revocation.
To work around the problem, just download the following two CRLs regularly from a computer connected to the internet:
On the UAG computer, open the MMC and add the certificates snap-in for the local computer account. Select the intermediate certification authorities and import the two CRL files that you downloaded before.
As a verification step, you should enable CAPI2 logging in the event log and see if there are more certificate verification errors.
Ben Ari and Ran Dolev are both remarkable UAG champs at Microsoft.
During the last months, they spent a lot of time to consolidate their deep knowledge and wrote a book about UAG. I am sure, the book will become your UAG-bible. See https://www.packtpub.com/microsoft-forefront-uag-2010-administrators-handbook/book for more information and how to purchase the book once it is out.
Microsoft UK and Microsoft Germany are hiring. See http://blogs.technet.com/b/isablog/archive/2010/09/29/forefront-tmg-uag-help-wanted-at-microsoft-in-reading-uk-and-munich-germany.aspx for more information
Users can change their user password through the UAG portal. Providing this functionality, it is mandatory that the Active Directory configuration is using a hostname or fully qualified domain name instead of an IP-address. See Configuring Active Directory authentication for more information. It is also required to enable the account used as Server access credentials in the UAG Active Directory configuration with extended permissions. Follow these steps to allow the Server access credentials changing user passwords.
I did some work publishing Citrix XenApp 5.x with UAG 2010. When arriving at step 6 of the configuration wizard I wondered how to define more than 4 Citrix Farm Servers. There was no scroll bar at the right of the list box and apparently the UI does not handle more than 4 entries.
To add more than four Citrix Farm Servers, just hit the INSERT key and you will see the scroll bar appearing and a new text field where new servers can be set.
If you are thinking about upgrading from IAG to UAG you should check out these two documents:
This post is more or less just a reference link to the System requirements for Forefront UAG endpoints. I am pointing this out because the client side requirements could be overlooked easily. Some UAG features are client OS and platform specific and could cause unexpected surprise.
UAG engineering blog 