System requirements for Forefront UAG client devices

Updated: February 15, 2013

Applies To: Unified Access Gateway

Based on product strategy, customer feedback, and prevailing market dynamics, Microsoft has made the decision not to deliver any further full version releases of UAG and TMG. To maintain business continuity with Windows 10, we recommend migrating to Web Application Proxyand Azure Active Directory Application Proxy.

This topic summarizes Forefront Unified Access Gateway (UAG) web browser support for client computers, including the supported client components and application publishing capabilities. The supported client components listed in the following tables are the client components that will be used for a particular publishing scenario. Depending on your publishing scenario, you may not require all of the client components.

For information about the Forefront UAG client components, see the Client component deployment planning guide.

For a complete list of available applications to publish, see Introduction to publishing design.

If you are reading this help from the Forefront UAG Management console, the latest version of this topic is available in the Forefront UAG TechNet library.

Internet Explorer browser support

Internet Explorer version Operating system Supported client components (ActiveX version) Supported publishing scenarios

Internet Explorer 8

Windows XP with SP3 32-bit

  • Endpoint Session Cleanup

  • Endpoint detection

  • SSL Application Tunneling

  • Socket Forwarding

  • SSL Network Tunneling (Network Connector)

  • Forefront UAG built-in applications

  • Web applications

  • Browser-embedded applications

  • Non-web applications

  • Terminal Services/RDS Applications (TS Client Tunneling; TS Web Client Tunneling; RemoteApp; Remote Desktop (predefined); Remote Desktop (user-defined)

Windows Vista 32-bit; Windows Vista with SP1 32-bit

  • Endpoint Session Cleanup

  • Endpoint detection

  • SSL Application Tunneling

  • Socket Forwarding

  • SSL Network Tunneling (Network Connector)

  • Forefront UAG built-in applications

  • Web applications

  • Browser-embedded applications

  • Non-web applications

  • Terminal Services/RDS Applications (TS Client Tunneling; TS Web Client Tunneling; RemoteApp; Remote Desktop (predefined); Remote Desktop (user-defined)

Windows Vista 64-bit; and Windows Vista with SP1 64-bit

noteNote:
Only the 32-bit browser is supported.

  • Endpoint Session Cleanup

  • Endpoint detection

  • SSL Network Tunneling (Network Connector)

  • Forefront UAG built-in applications

  • Web applications

  • RDS applications (RemoteApp; Remote Desktop (predefined); Remote Desktop (user-defined)

Windows 7 32-bit; Windows 7 with SP1 32-bit

  • Endpoint Session Cleanup

  • Endpoint detection

  • SSL Application Tunneling

  • Socket Forwarding

  • SSL Network Tunneling (SSTP)

  • Forefront UAG built-in applications

  • Web applications

  • Browser-embedded applications

  • Non-web applications

  • RDS Applications (RemoteApp; Remote Desktop (predefined); Remote Desktop (user-defined)

Windows 7 64-bit; and Windows 7 with SP1 64-bit

noteNote:
Only the 32-bit browser is supported.

  • Endpoint Session Cleanup

  • Endpoint detection

  • SSL Application Tunneling

  • SSL Network Tunneling (SSTP)

  • Forefront UAG built-in applications

  • Web Applications

  • RDS Applications (RemoteApp; Remote Desktop (predefined); Remote Desktop (user-defined)

Windows Server 2008 R2 64-bit

noteNote:
Only the 32-bit browser is supported.

  • Endpoint Session Cleanup

  • SSL Network Tunneling (SSTP)

  • Forefront UAG built-in applications

  • Web applications

  • RDS Applications (RemoteApp; Remote Desktop (predefined); Remote Desktop (user-defined)

Internet Explorer 9

noteNote:
Internet Explorer 9 is supported only from Forefront UAG SP1 Update 1

Windows Vista 32-bit; Windows Vista with SP1 32-bit

  • Endpoint Session Cleanup

  • Endpoint detection

  • SSL Application Tunneling

  • Socket Forwarding

  • SSL Network Tunneling (Network Connector)

  • Forefront UAG built-in applications

  • Web applications

  • Browser-embedded applications

  • Non-web applications

  • Terminal Services/RDS Applications (TS Client Tunneling; TS Web Client Tunneling; RemoteApp; Remote Desktop (predefined); Remote Desktop (user-defined)

Windows Vista 64-bit; Windows Vista with SP1 64-bit

noteNote:
Only the 32-bit browser is supported.

  • Endpoint Session Cleanup

  • Endpoint detection

  • SSL Network Tunneling (Network Connector)

  • Forefront UAG built-in applications

  • Web applications

  • RDS applications (RemoteApp; Remote Desktop (predefined); Remote Desktop (user-defined)

Windows 7 32-bit; Windows 7 with SP1 32-bit

  • Endpoint Session Cleanup

  • Endpoint detection

  • SSL Application Tunneling

  • Socket Forwarding

  • SSL Network Tunneling (SSTP)

  • Forefront UAG built-in applications

  • Web applications

  • Browser-embedded applications

  • Non-web applications

  • RDS Applications (RemoteApp; Remote Desktop (predefined); Remote Desktop (user-defined)

Windows 7 64-bit; Windows 7 with SP1 64-bit

noteNote:
Only the 32-bit browser is supported.

  • Endpoint Session Cleanup

  • Endpoint detection

  • SSL Application Tunneling

  • SSL Network Tunneling (SSTP)

  • Forefront UAG built-in applications

  • Web applications

  • RDS Applications (RemoteApp; Remote Desktop (predefined); Remote Desktop (user-defined)

Windows Server 2008 R2 64-bit

noteNote:
Only the 32-bit browser is supported.

  • Endpoint Session Cleanup

  • SSL Network Tunneling (SSTP)

  • Forefront UAG built-in applications

  • Web applications

  • RDS Applications (RemoteApp; Remote Desktop (predefined); Remote Desktop (user-defined)

Internet Explorer 10 (64-bit)

noteNote:
Internet Explorer 10 is supported only from Forefront UAG SP3

Windows 8 64-bit

  • Endpoint Session Cleanup

  • Endpoint detection

  • SSL Application Tunneling

  • Socket Forwarding

  • SSL Network Tunneling (SSTP)

noteNote:
The Socket Forwarding component supports only 32-bit applications. That is, only applications that can run using the WOW64 emulator are supported.

  • Forefront UAG built-in applications

  • Web applications

  • RDS Applications (RemoteApp; Remote Desktop (predefined); Remote Desktop (user-defined)

Windows Server 2012 64-bit

  • Endpoint Session Cleanup

  • Endpoint detection

  • SSL Application Tunneling

  • Socket Forwarding

  • SSL Network Tunneling (SSTP)

noteNote:
The Socket Forwarding component supports only 32-bit applications. That is, only applications that can run using the WOW64 emulator are supported.

  • Forefront UAG built-in applications

  • Web applications

  • RDS Applications (RemoteApp; Remote Desktop (predefined); Remote Desktop (user-defined)

Internet Explorer 10 (32-bit)

noteNote:
Internet Explorer 10 is supported only from Forefront UAG SP3

Windows 8 32-bit

  • Endpoint Session Cleanup

  • Endpoint detection

  • SSL Application Tunneling

  • Socket Forwarding

  • SSL Network Tunneling (SSTP)

  • Forefront UAG built-in applications

  • Web applications

  • Browser-embedded applications

  • Non-web applications

  • RDS Applications (RemoteApp; Remote Desktop (predefined); Remote Desktop (user-defined)

Internet Explorer 11 (64-bit)

noteNote:
Internet Explorer 11 is supported only from Forefront UAG SP4

Windows 8.1 64-bit

  • Endpoint Session Cleanup

  • Endpoint detection

  • SSL Application Tunneling

  • Socket Forwarding

  • SSL Network Tunneling (SSTP)

noteNote:
The Socket Forwarding component supports only 32-bit applications. That is, only applications that can run using the WOW64 emulator are supported.

  • Forefront UAG built-in applications

  • Web applications

  • RDS Applications (RemoteApp; Remote Desktop (predefined); Remote Desktop (user-defined)

   

Internet Explorer 11 (32-bit)

noteNote:
Internet Explorer 11 is supported only from Forefront UAG SP4

Windows 8.1 32-bit

  • Endpoint Session Cleanup

  • Endpoint detection

  • SSL Application Tunneling

  • Socket Forwarding

  • SSL Network Tunneling (SSTP)

  • Forefront UAG built-in applications

  • Web applications

  • Browser-embedded applications

  • Non-web applications

  • RDS Applications (RemoteApp; Remote Desktop (predefined); Remote Desktop (user-defined)

Non-Internet Explorer browser support

Brower version Operating system Supported client components (Java applet version) Supported publishing scenarios

Firefox 10

Firefox 11

noteNote:
Firefox 10 and 11 are supported only from Forefront UAG SP2.

Windows XP with SP3 32-bit

  • Endpoint Session Cleanup

  • Endpoint detection

  • SSL Application Tunneling

  • Forefront UAG built-in applications

  • Web applications

  • Browser-embedded applications

  • Non-web applications

  • Terminal Services/RDS Applications (TS Client Tunneling; TS Web Client Tunneling)

Windows XP with SP3 64-bit

noteNote:
Only the 32-bit browser is supported.

  • Endpoint Session Cleanup

  • Endpoint detection

  • Forefront UAG built-in applications

  • Web applications

  • Browser-embedded applications

  • Terminal Services/RDS Applications (TS Client Tunneling; TS Web Client Tunneling)

Windows Vista 32-bit; Windows Vista with SP1 32-bit

  • Endpoint Session Cleanup

  • Endpoint detection

  • SSL Application Tunneling

  • Forefront UAG built-in applications

  • Web applications

  • Browser-embedded applications

  • Non-web applications

  • Terminal Services/RDS Applications (TS Client Tunneling; TS Web Client Tunneling)

Windows Vista 64-bit; Windows Vista with SP1 64-bit

noteNote:
Only the 32-bit browser is supported.

  • Endpoint Session Cleanup

  • Endpoint detection

  • Forefront UAG built-in applications

  • Web applications

Windows 7 32-bit; Windows 7 with SP1 32-bit

  • Endpoint Session Cleanup

  • Endpoint detection

  • SSL Application Tunneling

  • Forefront UAG built-in applications

  • Web applications

  • Browser-embedded applications

  • Non-web applications

Windows 7 64-bit; Windows 7 with SP1 64-bit

noteNote:
Only the 32-bit browser is supported.

  • Endpoint Session Cleanup

  • Endpoint detection

  • Forefront UAG built-in applications

  • Web applications

Windows Server 2008 R2 64-bit

noteNote:
Only the 32-bit browser is supported.

  • Endpoint Session Cleanup

  • Endpoint detection

  • Forefront UAG built-in applications

  • Web applications

Macintosh OS X 10.3 and up (PowerPC and Intel)

  • Endpoint Session Cleanup

  • Endpoint detection

  • SSL Application Tunneling

  • Forefront UAG built-in applications

  • Web applications

  • Browser-embedded applications

  • Non-web applications

Linux 32-bit operating systems (RPM-based Linux distributions: Red Hat Enterprise 5, Fedora 10 and up. Debian Linux distributions; Debian 5 and up, Ubuntu 8.04 LTS and 9.04 and up)

  • Endpoint Session Cleanup

  • Endpoint detection

  • SSL Application Tunneling

  • Forefront UAG built-in applications

  • Web applications

  • Browser-embedded applications

  • Non-web applications

Safari 5.0.x

noteNote:
Safari 5.0.x is supported only from Forefront UAG SP1 Update 1

Windows XP with SP3 32-bit

  • Endpoint Session Cleanup

  • Endpoint detection

  • SSL Application Tunneling

  • Forefront UAG built-in applications

  • Web applications

  • Browser-embedded applications

  • Non-web applications

  • Terminal Services/RDS Applications (TS Client Tunneling; TS Web Client Tunneling)

Windows XP with SP3 64-bit

  • Endpoint Session Cleanup

  • Endpoint detection

  • Forefront UAG built-in applications

  • Web applications

  • Browser-embedded applications

  • Terminal Services/RDS Applications (TS Client Tunneling; TS Web Client Tunneling)

Windows Vista 32-bit; Windows Vista with SP1 32-bit

  • Endpoint Session Cleanup

  • Endpoint detection

  • SSL Application Tunneling

  • Forefront UAG built-in applications

  • Web applications

  • Browser-embedded applications

  • Non-web applications

  • Terminal Services/RDS Applications (TS Client Tunneling; TS Web Client Tunneling)

Windows Vista 64-bit; Windows Vista with SP1 64-bit

  • Endpoint Session Cleanup

  • Endpoint detection

  • Forefront UAG built-in applications

  • Web applications

Windows 7 32-bit; Windows 7 with SP1 32-bit

  • Endpoint Session Cleanup

  • Endpoint detection

  • SSL Application Tunneling

  • Forefront UAG built-in applications

  • Web applications

  • Browser-embedded applications

  • Non-web applications

Windows 7 64-bit; Windows 7 with SP1 64-bit

  • Endpoint Session Cleanup

  • Endpoint detection

  • Forefront UAG built-in applications

  • Web applications

Windows Server 2008 R2 64-bit

  • Endpoint Session Cleanup

  • Endpoint detection

  • Forefront UAG built-in applications

  • Web applications

Macintosh OS X 10.3 and up (PowerPC and Intel)

  • Endpoint Session Cleanup

  • Endpoint detection

  • SSL Application Tunneling

  • Forefront UAG built-in applications

  • Web applications

  • Browser-embedded applications

  • Non-web applications

Opera 9

noteNote:
Opera 9 is supported only on Forefront UAG SP1 Update 1

Windows XP with SP3 32-bit

  • Endpoint Session Cleanup

  • Endpoint detection

  • SSL Application Tunneling

  • Endpoint Quarantine Enforcement

  • Forefront UAG built-in applications

  • Web applications

  • Browser-embedded applications

  • Non-web applications

  • Terminal Services/RDS Applications (TS Client Tunneling; TS Web Client Tunneling)

Windows XP with SP3 64-bit

  • Endpoint Session Cleanup

  • Endpoint detection

  • Endpoint Quarantine Enforcement

  • Forefront UAG built-in applications

  • Web applications

  • Browser-embedded applications

  • Terminal Services/RDS Applications (TS Client Tunneling; TS Web Client Tunneling)

Windows Vista 32-bit; Windows Vista with SP1 32-bit

  • Endpoint Session Cleanup

  • Endpoint detection

  • SSL Application Tunneling

  • Endpoint Quarantine Enforcement

  • Forefront UAG built-in applications

  • Web applications

  • Browser-embedded applications

  • Non-web applications

  • Terminal Services/RDS Applications (TS Client Tunneling; TS Web Client Tunneling)

Windows Vista 64-bit; Windows Vista with SP1 64-bit

  • Endpoint Session Cleanup

  • Endpoint detection

  • Endpoint Quarantine Enforcement

  • Forefront UAG built-in applications

  • Web applications

Windows 7 32-bit; Windows 7 with SP1 32-bit

  • Endpoint Session Cleanup

  • Endpoint detection

  • SSL Application Tunneling

  • Endpoint Quarantine Enforcement

  • Forefront UAG built-in applications

  • Web applications

  • Browser-embedded applications

  • Non-web applications

Windows 7 64-bit; Windows 7 with SP1 64-bit

  • Endpoint Session Cleanup

  • Endpoint detection

  • Endpoint Quarantine Enforcement

  • Forefront UAG built-in applications

  • Web applications

Mobile browser support

Mobile operating system Accessing the Forefront UAG portal

Windows RT

Windows Phone 7, Windows Phone 7.5, Windows Phone 8

Note

Windows Phone 7.5 is supported only from Forefront UAG SP2; Windows Phone 8 is supported only from Forefront UAG SP3

Windows Phone 7, 7.5, and 8 support the premium mobile portal

iPhone version 3.0.x

Safari (iPhone version), supports the premium mobile portal

iOS: 4.x and 5.x on iPhone and iPad

Note

iOS 4.x on iPhone and iPad is supported only from Forefront UAG SP1 Update 1

iOS 5.x on iPhone and iPad is supported only from Forefront UAG SP2

Safari (iOS version) supports the premium mobile portal

Android: Phone 2.3; Tablet 3.0; Phone 4.0; Tablet 4.0

Note

Phone 2.3 and Tablet 3.0 are supported only from Forefront UAG SP1 Update 1

Phone 4.0 and Tablet 4.0 are supported only from Forefront UAG SP2

Android devices support the premium mobile portal

   

Supported client languages

Forefront UAG supports multiple languages for text that appears in client-side user interfaces. Supported languages include:

  1. Chinese (simplified)

  2. Chinese (traditional)

  3. English

  4. French

  5. German

  6. Italian

  7. Japanese

  8. Korean

  9. Portuguese (Brazil)

  10. Russian

  11. Spanish

Notes

  • Forefront UAG ActiveX client components are supported only on client endpoints running Windows operating systems with an Internet Explorer browser. For online installation, the browser must be configured to enable the download and running of signed ActiveX objects.

  • The Forefront UAG Component Manager ActiveX object installs the other client components. Only when performing the initial online installation of Forefront UAG Component Manager are administrator privileges required on the client endpoint. Using the client components and upgrading to newer versions of the components does not require administrator privileges.

  • Java client components cannot be installed using offline installation.

  • Java client components cannot be used with Internet Explorer.

  • For Java client components, client computers require JRE version 1.5. No other JRE version is supported.

  • In Forefront UAG, the initial installation of the Endpoint Detection Java applet and the Endpoint Session Cleanup Java applet require administrator privileges on the client endpoint.

  • There are no specific requirements for the Forefront UAG Client Trace and Socket Forwarding Helper components.

  • Although browsers other than those in the table above may be functional for site access, for full feature functionality use only the recommended browsers.