It sounds like the best practice for isolating different customers on an extranet is to use separate site collections for each customer (as is recommended in every answer to this question). If I have UAG available, I'm wondering if it would be a suitable replacement. I have two questions regarding this:
- Could UAG provide the same level of isolation without the added complexity of maintaining over 200 site collections?
- What drawbacks might this have (e.g. not being able to turn on/off services on a per-customer basis)?