Hi,

since Microsoft Windows 2012 and FF TMG 2010 are not compatible, and there won't be any upgrade for TMG nor any newer version or a service pack. shall we switch to Cisco? or there will be a substitute ?

Hi,

Forefront UAG for reverse Publishing (OWA, EAS, Sharepoint and more), SSL VPN
Windows Server 2012 for Direct Access
and some other solution from other vendors for Forward Proxy and Firewalling. And this depends on your requirements which product fulfill your needs

Which products can we use for Forward Proxy and Firewalling since TMG is End of Life?

HI,

products like Blucoat, Checkpoint, Cisco ASA, Sophos UTM and many more. The decision which product you want to use depends on your requirements

My requirements are as follows:

1. Forward Proxy. Clients will connect to HTTPS proxy and not HTTP

2. Allow only a certain domains

3. Allow only a certain set of IP Addresses

4. Clients to authenticate with proxy using client certificate. Proxy should be able to perform validations on the client certificate.

5. Good logging and reporting capabilities

Can you please help me with choosing a proxy server?

An obvious alternative is Squid which can do the trick for you (open source). There are a number of other alternatives along the same line and also commercial products like Bluecoat. <insert your favourite search engine> is your friend.