Questions tagged [microsoft-ftmg]

Microsoft Forefront Threat Management Gateway 2010 is the current version of the product previously known as ISA Server. TMG 2010 adds subscription-based URL filtering and malware protection, the free-subscription-based Microsoft IPS Network Inspection System, and HTTPS inspection.

Filter by
Sorted by
Tagged with
1 vote
1 answer
2k views

TMG reverse proxy and basic config

I recently set up TMG2010 and I believe I've done something wrong with my configuration. I do not want to run anything extra apart from a web publishing/reverse proxy setup. My internet goes to an ...
Abraxas's user avatar
  • 1,239
0 votes
0 answers
1k views

How to enable multicast routing in TMG 2010?

I have a TMG 2010 firewall between some office networks, which handles routing and firewalling; I need to let some application-specific multicast traffic flow between these networks; this is UDP ...
Massimo's user avatar
  • 71.3k
1 vote
1 answer
1k views

Asymmetric routing with two ForeFront TMG 2010 firewalls

I have a bizzarre networking problem. There is a network, a single IP subnet: 192.168.60.0/24. The network has two Internet-connected firewalls (running ForeFront TMG 2010), 192.168.60.253 (...
Massimo's user avatar
  • 71.3k
0 votes
1 answer
298 views

TMG setup exit with installation failed error when adding network adapter

I have setup a server for TMG installation. When I run setup it works fine until it gives me option to setect network. When I click on add option to select internal network, setup exit and gives an ...
MFSiD's user avatar
  • 78
2 votes
3 answers
5k views

Allow Broadcast to 255.255.255.255 through TMG/VPN (for NetBios Resolution)

Is it possible to allow a VPN client to do NetBIOS broadcast name resolution through TMG? In the TMG Queries I can see the rule that is blocking ClientIP->255.255.255.255 I've tried adding 255.255....
Alex Duggleby's user avatar
0 votes
1 answer
739 views

ForeFront TMG 2010 - Topology Question

Total 4 NICs NIC1 - LAN interface NIC2 - WAN 1 (ISP - A) NIC3 - WAN 2 (ISP - B) NIC4 - DMZ (ISP - C with Public IP Pool) Hi All, 3 ISP Connections 2 For Internet use (Local LAN Internet Access – ...
Mutahir's user avatar
  • 2,357
1 vote
1 answer
474 views

Threat Management Gateway can't access share on NAS

My network looks like this: DC - SERVER01 - Windows Server 2008 SBS TMG - TMG01 - Windows Server R2 Standard NAS - DATASTORE - Cisco NSS6000 All machines and devices are joined to the ...
sam's user avatar
  • 25
2 votes
1 answer
3k views

General Forefront TMG 2010 network / proxy configuration

We have decided to test and then deploy a Forefront TMG server on our network of 50 - 75 users (Windows 7, XP Clients, Windows Server 2008R2 Servers and a few Linux Boxes) Our Network Topology is : ...
Mutahir's user avatar
  • 2,357
0 votes
1 answer
2k views

Microsoft TMG high availability not working

I have two Threat Management Gateway Enterprise servers set up in a standalone array for authenticated web proxying. I can verify NLB is working, but when I restart tmgA, which is the array manager, ...
Britt Freeman's user avatar
1 vote
2 answers
10k views

Configuring TMG to allow a connection through the firewall

Here's the basic outline of the problem: I'm trying to ping from 192.168.0.2 to 192.168.10.2, but the ping dies on reaching 192.168.10.1. Obviously TMG is blocking it with the firewall. :) Assuming ...
user avatar
1 vote
1 answer
32k views

Forefront TMG Proxy blocking internal HTTP requests for FQDN

I have Forefront TMG installed as a proxy server. However, whenever I make HTTP requests to servers on the Internal network with a fully qualified DNS name, the proxy denies the connection. Denied ...
Pascal's user avatar
  • 133
2 votes
3 answers
4k views

Forefront TMG 2010: Can you monitor realtime TCP connections and bandwidth on a per-user basis?

I'm just starting a trial of ForeFront TMG to use as a proxy server. I know I can get a real time activity monitor and filter on a per user basis, but would like to be able to get a real time ...
user65235's user avatar
0 votes
1 answer
320 views

Forefront TMG - URL Overrides - how long does it take for them to come into play?

Adding a URL to a category seems seems to take an age, somewhere along the lines of 3 to 4 hours. Is this normal behaviour? Could someone tell me what is the default length of time that it takes ...
Richard's user avatar
1 vote
1 answer
1k views

Redundancy and Automated failover using Forefront TMG 2010 Standard between Production-DR site?

I'm using MS TMG 2010 Standard as my single firewall to publish my Exchange Server and IIS website to the internet, however it is just one VM in the DMZ network with just one network card (vNIC), what ...
Senior Systems Engineer's user avatar
1 vote
1 answer
3k views

Client VPN works, but only from certain locations (ISA/TMG)

I've done something very simple. Or so I thought... I have setup VPN client access in TMG (or ISA, they're pretty alike). I created a group called VPN in AD, added that as allowed VPN users in TMG, ...
jos's user avatar
  • 137
1 vote
0 answers
321 views

Microsoft TMG 2010 Sp1 override if authenticated?

I have a TMG 2010 SP1 server running on Server 2008 R2 in a single-NIC configuration - not live yet. I will be allowing web access in three fashions: one method is using the TMG as the default ...
Dan's user avatar
  • 1,288
0 votes
1 answer
2k views

Threat Management Gateway (TMG) 2010 will not NAT

I've got a TMG 2010 Standard server. Using the Web Proxy works brilliantly, however the server just does not seem to NAT any requests. The clients all have the TMG box set as their default gateway (...
Mark Henderson's user avatar
2 votes
1 answer
2k views

How do I configure a domain-joined, single NIC TMG box in the DMZ to publish Exchange?

I'd love to see some good guidance on the following scenario: Customer has a requirement to publish Exchange services securely over the Internet. The Customer has an existing hardware firewall and as ...
Jacob's user avatar
  • 322
1 vote
2 answers
6k views

How do I allow access to a service running on a Forefront TMG Server?

I'm setting up Zabbix for monitoring on our network. So far everything is going well, the agent is installed on all the servers. All the servers except the Forefront one are communicating with the ...
Richard C's user avatar
  • 331
3 votes
2 answers
2k views

forefront TMG 2010 ... UPnP Port mapping

I've tried googling the answer for a few days now, have come up with very little apart from http://retrohack.com/how-to-enable-xbox-live-behind-tmg-2010/ but can only publish ports on 1 ip ...
Rhys Evans's user avatar
0 votes
1 answer
395 views

Is it possible to configure TMG to impersonate a domain user for anonymous requests to a website?

I would like to configure Forefront Threat Management Gateway (formerly ISA server) to impersonate a specific domain user for any anonymous request to a particular listener. For example, for any ...
Daniel's user avatar
  • 141
0 votes
1 answer
2k views

RRAS vs ISA Server vs Forefront Threat Management Gateway

I was hoping someone could explain to me the differences between RRAS, ISA Server and Forefront Threat Management Gateway. As far as I can tell they all sort of do exactly the same thing? RRAS allows ...
Django Reinhardt's user avatar