Forefront is Microsoft's umbrella brand for Security, Identity and Access Management products. Note: Questions tagged *Forefront* should usually be tagged as something more specific.

learn more… | top users | synonyms (1)

0
votes
0answers
7 views

forefront protection 2010 for exchange server

How do I allow a certain URL on FPE 2010? Can it be done? The thing is when someone tries to send me a certain URL, FPE blocks it. Also, this may be an issue of a false positive mail. THANKS!
0
votes
1answer
21 views

FIM2010 R2 SP1 service account requirements on database after installation

We're in the process of updating our Forefront Identity Manager to 2010 R2 SP1. The SQL Server instance for the old installation has the FIM service account in the sysadmin role, as is required for ...
0
votes
0answers
100 views

How to make Forefront TMG build VPN site-to-site tunnel with reduced subnet

I am trying to implement a Site-to-Site VPN tunnel with a supplier. We are using Forefront TMG 2010 SP2 (Site A) and they are using Cisco ASA (Site B) I have complete access to SITE A, but no access ...
1
vote
0answers
54 views

Can end user using Forefront Identity Manager to leave security group?

In our company, users logon their desktop with AD and access Sharepoint using Windows authentication. Our users frequency changing teams. After they changed team, their access to old Sharepoint team ...
1
vote
0answers
32 views

Manage UAG Server via WinRM

Does anyone know of there is a way to configure a UAG server to work with WinRM? We have a small number of servers and the "Server Manager" application as well as PowerShell are the way we generally ...
0
votes
1answer
29 views

UAG 2010 and Exchange 2010 Service Pack installs

We are currently on Exchange 2010 SP2 and UAG 2010 SP1. I want to upgrade Exchange to SP3, and later on UAG to SP4, but not all at the same time due to scheduling. Ideally we'd like to do Exchange ...
2
votes
0answers
163 views

Forefront UAG with SSL/X509 auth for REST API

I'm not a network engeneer, but a software engeneer, so this theme is quite unfamiliar for me. We develop a solution, that consists of a server-side web application (with a rest api), working on java ...
0
votes
1answer
33 views

Single sign-on between two UAG servers

The situation: site1.company.com is published in UAG 1 (Datacenter 1) site2.company.com is published in UAG 2 (Datacenter 2) My question: Is it at all possible to set up a single sign on between ...
0
votes
1answer
613 views

Forefront TMG is Stop Internet after few min after enabling HTTPS Inspection

Forefront TMG is Stop Internet after few min after enabling HTTPS Inspection, specialty I am enable to block other https websites but gmail is not blocking till i enable https inspection & if i ...
1
vote
0answers
29 views

Can Forefront TMG server as an outbound chacheing solution to a web farm

We are to deploy several web servers in a datacenters. All running Windows 2K12 + IIS. I am not very familiar with data center best practices for deploying and maintaining web servers. In the office ...
1
vote
1answer
95 views

To expose MS CRM to the internet: Should we use IFD or something like Forefront UAG?

In our company we plan to expose our MS CRM 2011 system to the internet to make it easier to access from the outside. As far as I can see there are basically 2 alternatives: Make an Internet Facing ...
3
votes
1answer
1k views

Why does the clipboard not work with RDP through Microsoft's Unified Access Gateway (UAG)?

This one is really driving me nuts... For one of our customers, we are allowed access using the Microsoft Unified Access Gateway, which provides an HTTPS-tunneled way to (among other things) run ...
1
vote
1answer
248 views

FIM CM Broken After Manual Cert Renewal

I recently attempted to renew the certificate for the clmAgent user account according to these directions: http://technet.microsoft.com/en-us/library/hh149034%28v=ws.10%29.aspx I logged in with the ...
1
vote
0answers
102 views

SCCM 2007 + FEP 2010 deployment - when can I upgrade sql server?

I am in the process of migrating our forefront client security installation on the domain over to a forefront endpoint protection based on system center configuration manager 2007 platform. I have ...
1
vote
1answer
266 views

Is there a way to get more detailed logging out of Forefront TMG 2010

I am troubleshooting VPN connectivity issues with Forefront TMG. Everything looks correct in configuration but the packets are blocked regardless. The logs are not very descriptive. I see: Denied ...
1
vote
1answer
186 views

SCCM migration to SCCM 2012

I am trying to plan a migration from SCCM 2007 to SCCM 2012. I am unable to find if I can migrate the Forefront from SCCM 2007 in SCCM 2012, or if I will have to uninstall all agents and install new ...
4
votes
5answers
3k views

How do I find the WSUS server that my computers are connecting to for Windows Updates?

I have multiple WSUS servers setup on our domain; one is handling Windows Updates, while another is setup to only do Endpoint Protection updates (via SCCM 2012). Endpoint Updates are working properly ...
0
votes
1answer
191 views

UAG Direct Access 2 node Array wipes the IIS web site for NLS that is configured on the same box when DA is Activated

any help would be awesome, I have created a two node UAG Direct Access array, although not best practice I have setup NLS website on the UAG DA servers. Every time I click Activate on the Forefront ...
1
vote
1answer
63 views

Forefront Identity Manager 2010 no users

I've been scratching my head for a day or so trying to learn FIM. I attempted to walk through this tutorial which is one of the things I want to use it for - but I couldn't get it to work (users ...
2
votes
3answers
1k views

Forefront UAG vs. Server 2012 Direct Access

So I'm working on bringing my company into the 21'st century, with virtual servers, active directory, ADFS, SSO etc. Its a huuuuge project, with a future goal of ISO 27001 cerification. The current ...
1
vote
0answers
96 views

Installing VirtualBox disables Forefront

I have a Lenovo ThinkPad T520, less than a year old, running Windows 7 Ultimate. After I install VirtualBox (it has happened with several versions), Forefront Endpoint Protection 2010 no longer ...
1
vote
0answers
434 views

Syntax for file and process exclusions in Forefront Endpoint Protection?

I can't seem to find an official and up-to-date documentation on how to set up file and process exclusions in Forefront Endpoint Protection 2012. For file types, which of these will work? Are they ...
2
votes
1answer
1k views

Does Microsoft TMG 2010 handle websockets, at least through SSL?

I thought in my own insanity that if I published an IIS 8 web server with websockets through HTTPS there shouldn't be a problem even with the TMG. However, regardless of publishing, filtering and ...
0
votes
2answers
3k views

Forefront TMG 2010 RDP Connections without non-standard ports

From my reading, it looks like the Forefront TMG will not allow the passing of RDP connections through the firewall without configuring a non-standard port for each IP address of the internal servers ...
1
vote
1answer
170 views

How to stop UAG authenticating requests via LDAP

I want UAG to not authenticate ActiveSync requests before passing them on. I can see that at the moment the requests aren't being passed through because UAG checks with LDAP, which says that the user ...
-2
votes
2answers
468 views

TMG: Allowed user groups and weird group names

I am trying to setup a basic PPTP VPN connection using Forefront TMG 2010. Whenever I try to connect to the VPN connection from my Windows 7 machine, I get an error related to unauthorized access. So ...
1
vote
1answer
154 views

Will Forefront 2010 Antispam/Antivirus protection work on all-in-one Exchange 2010 servers in DAG

We have 2 Exchange 2010 servers with every single role on each. Servers are in DAG mode and they have TMG 2010 as entry point and doing as load balancer. Can I install Forefront 2010 on both Exchange ...
0
votes
1answer
1k views

Disable Forefront Endpoint Protection 2010 Desktop Alerts

Is it possible to disable desktop alerts for FEP 2010, without disabling realtime protection? I.e., the notification that pops up that says: We want to maintain realtime protection, neutralise ...
1
vote
1answer
1k views

Exchange 2010 and FPE Content Filtering

I have a box running Server 2008 R2, Exchange 2010 SP1, and Forefront Protection for Exchange 2010. The issue is that I cannot for the life of me get my content filters to quarantine a single message ...
0
votes
1answer
1k views

Sporadic HTTP 408 response on pages behind MS Forefront TMG 2010

I'm getting sporadic HTTP 408 responses when I try to load pages from my site. The network is set up with Forefront acting as a proxy in front of the web server. When I first load the page, it comes ...
3
votes
1answer
452 views

Issues with Forefront for Exchange file filter

I have an issue where I want to strip some image attachments from emails. Using Forefront for Exchange I can create a file filter rule based on attachment name, type, and size. This initially seemed ...
1
vote
0answers
366 views

How do I add a new full admin account to SCCM 2007?

I want to install Forefront Endpoint Protection on my SCCM server using a new service account that I just created specifically for this purpose. I'll be using a separate reporting database so I'll ...
0
votes
2answers
322 views

Forefront TMG - segregate authenticated traffic

I am running Forefront TMG SP1 rollup 3. All desktop clients will have the Firewall Client installed. Servers will not. I would like to segregate my outbound network traffic according to traffic ...
1
vote
5answers
396 views

Cisco 2811 to Forefront - stop broadcast traffic

I recently upgraded from an old ISA to a Forefront box. I'm now receiving a ton of 0xc0040050 errors. The vast majority are to an internal broadcast address - 100.100.100.255. This is a legacy subnet ...
0
votes
2answers
235 views

Forefront TMG page denied display

Forefront TMG - URL categorization reason not displays although it should be for denied pages. I have tried all the available checkboxes on the Forefront rule regarding the message displayed with no ...
1
vote
2answers
391 views

Remove one's domain from general spam blacklist

We've a problem similar to the question Getting a domain name off of the blacklist but the solutions posted there doesn't help. The problem I'm facing is that our domain is probably marked ...
4
votes
1answer
3k views

Forefront Protection for Exchange - Allowed sender still delivered to Junk Mail

I've got a fresh install of Server 2008 R2 SP1, Exchange 2010 SP1, and Forefront 2010 Protection for Exchange. All on the same box, Exchange is CAS/Hub/MBS. This is a testing box, looking to evaluate ...
0
votes
1answer
558 views

ForeFront TMG 2010 - Topology Question

Total 4 NICs NIC1 - LAN interface NIC2 - WAN 1 (ISP - A) NIC3 - WAN 2 (ISP - B) NIC4 - DMZ (ISP - C with Public IP Pool) Hi All, 3 ISP Connections 2 For Internet use (Local LAN Internet Access ...
1
vote
1answer
919 views

UAG Direct Access - Exporting GPO to offline hosts

Im probably missing something here, but i couldnt find any reference to this. I have a host that is using Direct Access from a remote location. We had to make changes on the server side and ofc, ...
1
vote
1answer
2k views

General Forefront TMG 2010 network / proxy configuration

We have decided to test and then deploy a Forefront TMG server on our network of 50 - 75 users (Windows 7, XP Clients, Windows Server 2008R2 Servers and a few Linux Boxes) Our Network Topology is : ...
1
vote
2answers
2k views

SCCM 2007 not installing Forefront Endpoint Protection client

We've recently upgraded from Forefront Endpoint Protection 2007 to 2010 and it now needs SCCM to deploy the clients, so we are using SCCM for the first time and struggling a little bit. SCCM is fully ...
1
vote
0answers
74 views

domain users migration from Ichain to UAG

When migrating(for authentication) IChain to UAG getting the below error. The description for Event ID ( 0 ) in Source ( CMAGENTServiceCMSWEBDEV0 ) cannot be found. The local computer may not have ...
2
votes
2answers
194 views

How to configure a windows phone 7 to access website behind Forefront Threat Management Gateway

As in the title. We have a WCF service, and a Windows Phone 7 client. One of our customers wants to install the service behind a TMG server. I know that TMG is an update to the old ISA server and I ...
1
vote
0answers
306 views

Scan a NAS Device with Microsoft Forefront Endpoint Protection

We are having problems with viruses sneaking through our virus scanner and onto our NAS and I want to scan the whole NAS. If I attempt to run a scan on the whole drive using the GUI for Forefront ...
2
votes
3answers
664 views

Does MS Forefront TMG cache authentication?

I'm testing a client machine that makes requests to a biztalk server using a forefront machine as a web proxy. Upon first test I put in an invalid name/password into the receive port and received the ...
1
vote
1answer
3k views

Unable to join the domain?

I am having difficulties in joining my Windows Server to the domain, may I know what could be the problem ? I suspect that there is a firewall in between this DR internal site and the DMZ where this ...
1
vote
1answer
1k views

Redundancy and Automated failover using Forefront TMG 2010 Standard between Production-DR site?

I'm using MS TMG 2010 Standard as my single firewall to publish my Exchange Server and IIS website to the internet, however it is just one VM in the DMZ network with just one network card (vNIC), what ...
2
votes
0answers
495 views

How does ForeFront UAG implement single sign-on?

One feature of Forefront is the ability to pre-authenticate external users before their requests are sent to a published web application. In addition, it is supposed to be able to forward the ...
3
votes
1answer
2k views

Limiting bandwidth of workstations in MS Forefront TMG

We have configured Microsoft forefront TMG 2010 Enterprise as the cache server which provides internet access for all computers in our department. Is there any way to limit download speed per ...
0
votes
1answer
3k views

Share the same subnet between Internal network and VPN Clients

I would like to set up a configuration where VPN clients connecting to my Forefront TMG can access all the resources of my Internal network without having the to use the option "Use default gateway ...