Forefront is Microsoft's umbrella brand for Security, Identity and Access Management products. Note: Questions tagged *Forefront* should usually be tagged as something more specific.

learn more… | top users | synonyms (1)

1
vote
0answers
44 views

How to stop Forefront from blocking my program?

(I'm not sure if this should go on StackOverflow.) I have a program running at a customer site for ten years now. It takes their data and uses it to fill out web forms. It works by attaching itself ...
1
vote
0answers
65 views

Microsoft Forefront TMG, IIS and SQL server on one server

We have a Windows 2008 VPS with IIS and SQL Server, hosted by a provider. We use it for hosting web applications on the Internet. The only firewall we can use is Windows firewall. I would like to have ...
0
votes
0answers
22 views

ForeFront TMG server is removing bits of URL

My ForeFront TMG server is removing window.location.hash from url provided before redirecting user to the default page. so I have a url like, www.example.com/sites/default.aspx#id=2342|someTable ...
2
votes
0answers
109 views

Forefront UAG with SSL/X509 auth for REST API

I'm not a network engeneer, but a software engeneer, so this theme is quite unfamiliar for me. We develop a solution, that consists of a server-side web application (with a rest api), working on java ...
0
votes
0answers
77 views

SSO to multiple websites from Sharepoint website

We have an intranet based on Sharepoint 2010. In this intranet we have several links to other webservers within the same Active Directory, for example a link to our Outlook Web Access site on our ...
1
vote
3answers
232 views

SCCM 2012 Virtual Lab

I am building an SCCM 2012 virtual lab and I have about 70% of it completed, but I want to test patching, but I dont want to connect my virtual lab to the production environment to pull patches. My ...
0
votes
0answers
39 views

Configuring MS forefront for internal network

This is my first foray into MS Forefront and I'm trying to understand UAG better. I am running a Windows 8 host with 2 VMs: VM1 is the domain controller (Windows Server 2012, IP 5.5.5.5) VM2 is the ...
-1
votes
1answer
517 views

Server infected with Backdoor:Win32/Caphaw.D virus [duplicate]

The virsu hiding all of the folders and replace it with shortcut. These are the setting in shortcuts. C:\Windows\system32\cmd.exe /C start cmd.exe /C if exist "\\server\folder\hAoix.NCf" start "" ...
1
vote
0answers
1k views

Outlook client behind forefront TMG 2010 unable to connect to External Exchange server

Here is my situation. Our office just got sold and we are working on the migration to the new company's environment. Everything has worked fine until the Outlook client's migration. Our firewall is ...
1
vote
0answers
221 views

Is there a way to check registry definitions in Forefront on remote systems?

After playing with the script found in This Thread yesterday, I found that the script did exactly what I was looking for. However, I need to run these checks on remote systems on our network. I spent ...
1
vote
1answer
155 views

SCCM migration to SCCM 2012

I am trying to plan a migration from SCCM 2007 to SCCM 2012. I am unable to find if I can migrate the Forefront from SCCM 2007 in SCCM 2012, or if I will have to uninstall all agents and install new ...
0
votes
1answer
140 views

Forefront TMG and IIS on one internet gateway server

I have two servers in a datacenter. One is IIS and another is SQL Server machine. I'd like to install Forefront on a gateway server to make use of "smart" web site publishing and VPN that come with ...
0
votes
1answer
155 views

TMG setup exit with installation failed error when adding network adapter

I have setup a server for TMG installation. When I run setup it works fine until it gives me option to setect network. When I click on add option to select internal network, setup exit and gives an ...
1
vote
0answers
363 views

Syntax for file and process exclusions in Forefront Endpoint Protection?

I can't seem to find an official and up-to-date documentation on how to set up file and process exclusions in Forefront Endpoint Protection 2012. For file types, which of these will work? Are they ...
1
vote
1answer
146 views

How to stop UAG authenticating requests via LDAP

I want UAG to not authenticate ActiveSync requests before passing them on. I can see that at the moment the requests aren't being passed through because UAG checks with LDAP, which says that the user ...
3
votes
2answers
963 views

Does System Center 2012 Endpoint Protection require the use of Configuration Manager?

We have a relatively small organization (~15 users), and have used the ForeFront EndPoint Protection 2010 desktop client without the use of central management, like Configuration Manager. Now that ...
0
votes
2answers
422 views

Setting up a VPN connection before login automatically

Our company's domain controller is located in data center behind the Forefront TMG with a VPN gateway set up. I want my Windows 7 machines to be able to work in an active directory domain ...
0
votes
1answer
186 views

Accessing domain controller in data center

We used to have a domain controller in our local office network. Now we have moved the servers to data center and the dc is there, behind the forefront TMG firewall. In order for my office computers ...
0
votes
0answers
362 views

Using TMG IPSec Site-2-Site to send packets to networks other than Internal

We have two TMG servers set up with an IPSec Tunnel between them and can connect fine between the two internal networks. Each TMG server has 3 NICs Internal External DMZ The problem I have is I ...
-1
votes
1answer
397 views

Installing forefront identity manager 2010, need a guide/tutorial

Im trying to install forefront identity manager 2010 (FIM) in my test environment. Since I never done it before I need somekind of help how to do it. I've been trying to find a guide or a video that ...
1
vote
0answers
78 views

FIM: Put connector space object in metaverse

I am using Forefront Identity Manager and am new to it. I made a simple management Agent and imported some data in the connector space. I used a "Full Import and Full Synchronisation" Run script. ...
0
votes
1answer
313 views

Trying to setup Exchange 2010 certificate on TMG

I'm running into a problem here, and I'm positive it's simply that I'm not doing something correct (as opposed to it not working). I have a current Exchange 2007 server setup with a third party cert ...
1
vote
1answer
1k views

RDP Certificate Distribution Points

I am receiving the message "Your computer can't connect to the remote computer because the Remote Desktop Gateway's server's certificate has expired or has been revoked" when trying to access a TS ...
1
vote
1answer
567 views

TMG with client certificates for TS Gateway

How to set up client side certificate authentication using an enterprise CA for a TS gateway via Forefront TMG 2010? To date I have executed the following: I have a Terminal Services Gateway ...
0
votes
0answers
470 views

How do I check to see if a Forefront client has checked in with the server?

I staged a system and installed the package for ForeFront client security (1.5.1996.0) which I believe to have been created on our local server. I assume it should automatically point back to it and ...
1
vote
0answers
156 views

Custom “no access” page on TMG publishing

We have a number of web sites that are hosted on a server inside our corporate network. A Forefront TMG is an internet gateway for the network. We have done a web site publishing through forefront. ...
0
votes
0answers
578 views

Publishing a web service in Forefront TMG using SSL Client Certificate Authentication

I have a 'sandbox' domain and I am experimenting with different forms of authentication. I have the following three machines in my network: Forefront TMG, IIS Web Server, ADDS. Outside of the domain ...
1
vote
1answer
372 views

Secure Skype traffic through Forefront

How can I allow Skype to function correctly with restricted outbound ports, HTTPS inspection and the IE proxy enabled? All the documentation I've come across suggest disabling at least one of these ...
0
votes
2answers
287 views

Forefront TMG - segregate authenticated traffic

I am running Forefront TMG SP1 rollup 3. All desktop clients will have the Firewall Client installed. Servers will not. I would like to segregate my outbound network traffic according to traffic ...
1
vote
5answers
347 views

Cisco 2811 to Forefront - stop broadcast traffic

I recently upgraded from an old ISA to a Forefront box. I'm now receiving a ton of 0xc0040050 errors. The vast majority are to an internal broadcast address - 100.100.100.255. This is a legacy subnet ...
0
votes
2answers
218 views

Forefront TMG page denied display

Forefront TMG - URL categorization reason not displays although it should be for denied pages. I have tried all the available checkboxes on the Forefront rule regarding the message displayed with no ...
0
votes
1answer
415 views

Main mode SA stopped responding?

I'm having connection problems with a site to site VPN. My site uses Forefront TMG box, the remote site a Cisco VPN concentrator. The connection is dropping frequently. The only entry that shows up ...
1
vote
1answer
447 views

789 connecting Forefront VPN

I am receiving event 789 when connecting to my Forefront TMG VPN server from windows 7 clients via L2TP. This does not occur on XP systems. I've run through the debugging at ...
4
votes
2answers
478 views

Is it hard to set up Microsoft Forefront Endpoint protection?

I have seen that Microsoft Forefront Endpoint protection has pretty decent pricing, although it seems to require a separate System Configuration Manager installed that's quite pricey. I am currently ...
0
votes
2answers
78 views

Since MS ForeFront firewall is installed the network is going crazy

a few weeks ago we installed the new MS Forefront Firewall server. Since that day we have trouble in our network. example: a user is trying to visit www.google.com -> his browser opens ...
0
votes
1answer
430 views

Exchange online mark email as spam from a legitimate address?

A client of us, working for a college, is using his work email to send us questions regarding a SharePoint implementation we have done. A couple of weeks ago we stopped recieving emails from him and ...
1
vote
1answer
278 views

Removing ForeFront Client Security and MOM Server - How to repoint managed clients to unmanaged?

Like the title says, how can I remove FCS and MOM and not have the clients wait for updates from the server and go on its own to get updates from Windows Update automatically? Reason for this is we ...
0
votes
1answer
161 views

Hostname change not reflected in MOM 2005

So I have a bit of a weird thing here. I was testing Forefront with MOM 2005 and WSUS and ran into a problem. One of the computers I was testing with had to be re-imaged due to a failed SP update. ...
1
vote
1answer
13k views

Forefront TMG Proxy blocking internal HTTP requests for FQDN

I have Forefront TMG installed as a proxy server. However, whenever I make HTTP requests to servers on the Internal network with a fully qualified DNS name, the proxy denies the connection. Denied ...
2
votes
3answers
2k views

Forefront TMG 2010: Can you monitor realtime TCP connections and bandwidth on a per-user basis?

I'm just starting a trial of ForeFront TMG to use as a proxy server. I know I can get a real time activity monitor and filter on a per user basis, but would like to be able to get a real time ...
0
votes
1answer
274 views

Forefront TMG - URL Overrides - how long does it take for them to come into play?

Adding a URL to a category seems seems to take an age, somewhere along the lines of 3 to 4 hours. Is this normal behaviour? Could someone tell me what is the default length of time that it takes ...
2
votes
0answers
485 views

How does ForeFront UAG implement single sign-on?

One feature of Forefront is the ability to pre-authenticate external users before their requests are sent to a published web application. In addition, it is supposed to be able to forward the ...
3
votes
1answer
2k views

Limiting bandwidth of workstations in MS Forefront TMG

We have configured Microsoft forefront TMG 2010 Enterprise as the cache server which provides internet access for all computers in our department. Is there any way to limit download speed per ...
0
votes
1answer
2k views

Share the same subnet between Internal network and VPN Clients

I would like to set up a configuration where VPN clients connecting to my Forefront TMG can access all the resources of my Internal network without having the to use the option "Use default gateway ...
0
votes
1answer
2k views

Network outside internal not reaching TMG Forefront 2010 (Hyper-V environment)

Below is my environment: I have 1 physical machine running Windows 2008 R2, with the Hyper-V role. This machine has 3 physical NICs: One for Internet One for Internal Network One for Wireless ...
0
votes
2answers
783 views

Convert IP Address format from ForeFront Firewall logs with SQL

I am trying to query IP addresses from Forefront Firewall logs, and I am a little stuck on the IP formatting C0A8E008-FFFF-0000-0000-000000000000 Can anyone give me the MSSQL command to turn this ...
1
vote
4answers
465 views

Putting a Windows DC, Exchange in a DMZ

I have one guy at my company telling me that I should put FF:TMG in between my main Internet-facing firewall (Cisco 5510) and put my Exchange server and DC on the internal network. I have another guy ...
0
votes
1answer
3k views

Open source alternative to ISA/Forefront TMG?

I'm using Forefront TMG to do web server publishing & SSO and very little else. Are there any open source alternatives that can satisfy all (or at least most) of these features: Web server ...
1
vote
1answer
456 views

Forefront Client Security On Server with Exchange 2010

If we install Forefront Client Security on a Server which already has Forefront for Exchange 2010 is it smart enough to exclude all of the exchange directories/process/file extensions as suggested by ...
0
votes
1answer
197 views

Do you need additional Security Products besides Forefront Security For Exchange Server

Does Forefront for Exchange Server 2010 cover the entire windows server or just the Exchange 2010 installation on a Windows 2008 R2 server? Do we need to run an additional Forefront product for full ...