Microsoft Forefront Threat Management Gateway

No, Microsoft discontinued both mainstream and extended support for Forefront TMG, meaning the product no longer receives security updates or patches. Organizations still running TMG are operating on an unsupported platform and should plan a migration to a current firewall solution.

Microsoft did not release a direct replacement for TMG. Many organizations migrated to third-party next-generation firewalls from vendors such as Palo Alto Networks, Fortinet, or Check Point, while some Microsoft-centric shops adopted Azure Application Proxy for specific publishing scenarios.

Yes, TMG was one of Microsoft's earlier firewall products to support HTTPS inspection, allowing administrators to decrypt and inspect encrypted web traffic for malware and policy violations. This was a key feature for organizations enforcing outbound web filtering and content security policies.

While TMG can technically still be installed on compatible Windows Server hardware, deploying it in a new environment is strongly discouraged since the product is unsupported and receives no security patches. Modern threat landscapes and compliance requirements make legacy firewalls like TMG a significant security risk.