Questions tagged [microsoft-ftmg]
Microsoft Forefront Threat Management Gateway 2010 is the current version of the product previously known as ISA Server. TMG 2010 adds subscription-based URL filtering and malware protection, the free-subscription-based Microsoft IPS Network Inspection System, and HTTPS inspection.
22
questions
1
vote
1
answer
2k
views
TMG reverse proxy and basic config
I recently set up TMG2010 and I believe I've done something wrong with my configuration. I do not want to run anything extra apart from a web publishing/reverse proxy setup.
My internet goes to an ...
0
votes
0
answers
1k
views
How to enable multicast routing in TMG 2010?
I have a TMG 2010 firewall between some office networks, which handles routing and firewalling; I need to let some application-specific multicast traffic flow between these networks; this is UDP ...
1
vote
1
answer
1k
views
Asymmetric routing with two ForeFront TMG 2010 firewalls
I have a bizzarre networking problem.
There is a network, a single IP subnet: 192.168.60.0/24.
The network has two Internet-connected firewalls (running ForeFront TMG 2010), 192.168.60.253 (...
0
votes
1
answer
298
views
TMG setup exit with installation failed error when adding network adapter
I have setup a server for TMG installation. When I run setup it works fine until it gives me option to setect network. When I click on add option to select internal network, setup exit and gives an ...
2
votes
3
answers
5k
views
Allow Broadcast to 255.255.255.255 through TMG/VPN (for NetBios Resolution)
Is it possible to allow a VPN client to do NetBIOS broadcast name resolution through TMG?
In the TMG Queries I can see the rule that is blocking ClientIP->255.255.255.255
I've tried adding 255.255....
0
votes
1
answer
739
views
ForeFront TMG 2010 - Topology Question
Total 4 NICs
NIC1 - LAN interface
NIC2 - WAN 1 (ISP - A)
NIC3 - WAN 2 (ISP - B)
NIC4 - DMZ (ISP - C with Public IP Pool)
Hi All,
3 ISP Connections
2 For Internet use (Local LAN Internet Access – ...
1
vote
1
answer
474
views
Threat Management Gateway can't access share on NAS
My network looks like this:
DC - SERVER01 - Windows Server 2008 SBS
TMG - TMG01 - Windows Server R2 Standard
NAS - DATASTORE - Cisco NSS6000
All machines and devices are joined to the ...
2
votes
1
answer
3k
views
General Forefront TMG 2010 network / proxy configuration
We have decided to test and then deploy a Forefront TMG server on our network of 50 - 75 users (Windows 7, XP Clients, Windows Server 2008R2 Servers and a few Linux Boxes)
Our Network Topology is :
...
0
votes
1
answer
2k
views
Microsoft TMG high availability not working
I have two Threat Management Gateway Enterprise servers set up in a standalone array for authenticated web proxying. I can verify NLB is working, but when I restart tmgA, which is the array manager, ...
1
vote
2
answers
10k
views
Configuring TMG to allow a connection through the firewall
Here's the basic outline of the problem:
I'm trying to ping from 192.168.0.2 to 192.168.10.2, but the ping dies on reaching 192.168.10.1.
Obviously TMG is blocking it with the firewall. :)
Assuming ...
1
vote
1
answer
32k
views
Forefront TMG Proxy blocking internal HTTP requests for FQDN
I have Forefront TMG installed as a proxy server. However, whenever I make HTTP requests to servers on the Internal network with a fully qualified DNS name, the proxy denies the connection.
Denied ...
2
votes
3
answers
4k
views
Forefront TMG 2010: Can you monitor realtime TCP connections and bandwidth on a per-user basis?
I'm just starting a trial of ForeFront TMG to use as a proxy server.
I know I can get a real time activity monitor and filter on a per user basis, but would like to be able to get a real time ...
0
votes
1
answer
320
views
Forefront TMG - URL Overrides - how long does it take for them to come into play?
Adding a URL to a category seems seems to take an age, somewhere along the lines of 3 to 4 hours.
Is this normal behaviour?
Could someone tell me what is the default length of time that it takes ...
1
vote
1
answer
1k
views
Redundancy and Automated failover using Forefront TMG 2010 Standard between Production-DR site?
I'm using MS TMG 2010 Standard as my single firewall to publish my Exchange Server and IIS website to the internet, however it is just one VM in the DMZ network with just one network card (vNIC), what ...
1
vote
1
answer
3k
views
Client VPN works, but only from certain locations (ISA/TMG)
I've done something very simple. Or so I thought...
I have setup VPN client access in TMG (or ISA, they're pretty alike). I created a group called VPN in AD, added that as allowed VPN users in TMG, ...
1
vote
0
answers
321
views
Microsoft TMG 2010 Sp1 override if authenticated?
I have a TMG 2010 SP1 server running on Server 2008 R2 in a single-NIC configuration - not live yet.
I will be allowing web access in three fashions:
one method is using the TMG as the
default ...
0
votes
1
answer
2k
views
Threat Management Gateway (TMG) 2010 will not NAT
I've got a TMG 2010 Standard server. Using the Web Proxy works brilliantly, however the server just does not seem to NAT any requests.
The clients all have the TMG box set as their default gateway (...
2
votes
1
answer
2k
views
How do I configure a domain-joined, single NIC TMG box in the DMZ to publish Exchange?
I'd love to see some good guidance on the following scenario:
Customer has a requirement to publish Exchange services securely over the Internet.
The Customer has an existing hardware firewall and as ...
1
vote
2
answers
6k
views
How do I allow access to a service running on a Forefront TMG Server?
I'm setting up Zabbix for monitoring on our network. So far everything is going well, the agent is installed on all the servers. All the servers except the Forefront one are communicating with the ...
3
votes
2
answers
2k
views
forefront TMG 2010 ... UPnP Port mapping
I've tried googling the answer for a few days now, have come up with very little apart from
http://retrohack.com/how-to-enable-xbox-live-behind-tmg-2010/
but can only publish ports on 1 ip ...
0
votes
1
answer
395
views
Is it possible to configure TMG to impersonate a domain user for anonymous requests to a website?
I would like to configure Forefront Threat Management Gateway (formerly ISA server) to impersonate a specific domain user for any anonymous request to a particular listener. For example, for any ...
0
votes
1
answer
2k
views
RRAS vs ISA Server vs Forefront Threat Management Gateway
I was hoping someone could explain to me the differences between RRAS, ISA Server and Forefront Threat Management Gateway. As far as I can tell they all sort of do exactly the same thing?
RRAS allows ...