I know the general topic has been touched on a few times pertaining to a internal/external setup, but I wanted to bring the topic up again to see if any new ideas are out there.
With the TMG wind-down I built up a Untangle server and so far and fairly happy with it. As most people probably have said, great in some areas but certainly lacking in some of the features TMG offered.
But... the one major feature I miss with TMG is the ability for it to handle FBA for internal sites like OWA. Since the UT appliance requires the barebones forwarding of traffic directly to the Exchange/OWA internal IP, I have to have FBA enable for everything. That of course breaks the neat ability to have internal clients auto login with integrated auth.
I did come across a few posts of people trying to create separate OWA sites so internal users could use integrated windows auth, and the other site would continue to use FBA for external users. I tried following the general outline of what I was seeing and created a separate OWA and ECP site, but every time I tried changing authentication settings I completely hosed the entire log ability. That was multiple headaches with every change attempt so I didn't try to push the idea past a few attempts.
So... I suppose this is a multi part question. If not using a TMG setup, can anybody offer suggestions on what is realistically possible in terms of having a internal/external option.
Thanks