Forefront is Microsoft's umbrella brand for Security, Identity and Access Management products. Note: Questions tagged *Forefront* should usually be tagged as something more specific.

learn more… | top users | synonyms (1)

2
votes
2answers
175 views

Migrate user accounts from Azure AD to on-premise AD?

My company uses Office 365 for Exchange, SharePoint, Lync etc. including the build-in user administration via Azure Active Directory. Now we want to switch to a local AD on a Windows Server. It shall ...
0
votes
1answer
7 views

FIM2010 R2 SP1 service account requirements on database after installation

We're in the process of updating our Forefront Identity Manager to 2010 R2 SP1. The SQL Server instance for the old installation has the FIM service account in the sysadmin role, as is required for ...
1
vote
0answers
6 views

Scheduling Forefront Endpoint Protection with SCCM 2007

I just started using SCCM 2007 in our network (replacing the old IT assistant) and I was wondering how to schedule a scan for a group of computers using Forefront Endpoint Protection. What would be ...
0
votes
0answers
23 views

Microsoft AV - Do Exclusions Apply to Full Scans or Realtime Protection Only?

The vendor for a new system we're setting up sent us specs for their recommended A/V exclusions. They recommend that we exclude .PDF, .JAR, .BIN, and .DAT files (among others) from real-time ...
0
votes
1answer
56 views

What is the relationship between DirectAccess, Web Application Proxy, and Forefront UAG?

We're exploring the feasibility of deploying DirectAccess to our off-campus laptops as a more seamless alternative to our TS-Gateway server, and I would like to know the benefits and relationship ...
1
vote
0answers
52 views

How to stop Forefront from blocking my program?

(I'm not sure if this should go on StackOverflow.) I have a program running at a customer site for ten years now. It takes their data and uses it to fill out web forms. It works by attaching itself ...
1
vote
0answers
82 views

Microsoft Forefront TMG, IIS and SQL server on one server

We have a Windows 2008 VPS with IIS and SQL Server, hosted by a provider. We use it for hosting web applications on the Internet. The only firewall we can use is Windows firewall. I would like to have ...
0
votes
0answers
36 views

ForeFront TMG server is removing bits of URL

My ForeFront TMG server is removing window.location.hash from url provided before redirecting user to the default page. so I have a url like, www.example.com/sites/default.aspx#id=2342|someTable ...
2
votes
0answers
147 views

Forefront UAG with SSL/X509 auth for REST API

I'm not a network engeneer, but a software engeneer, so this theme is quite unfamiliar for me. We develop a solution, that consists of a server-side web application (with a rest api), working on java ...
1
vote
3answers
351 views

SCCM 2012 Virtual Lab

I am building an SCCM 2012 virtual lab and I have about 70% of it completed, but I want to test patching, but I dont want to connect my virtual lab to the production environment to pull patches. My ...
0
votes
0answers
40 views

Configuring MS forefront for internal network

This is my first foray into MS Forefront and I'm trying to understand UAG better. I am running a Windows 8 host with 2 VMs: VM1 is the domain controller (Windows Server 2012, IP 5.5.5.5) VM2 is the ...
-1
votes
1answer
583 views

Server infected with Backdoor:Win32/Caphaw.D virus [duplicate]

The virsu hiding all of the folders and replace it with shortcut. These are the setting in shortcuts. C:\Windows\system32\cmd.exe /C start cmd.exe /C if exist "\\server\folder\hAoix.NCf" start "" ...
1
vote
0answers
2k views

Outlook client behind forefront TMG 2010 unable to connect to External Exchange server

Here is my situation. Our office just got sold and we are working on the migration to the new company's environment. Everything has worked fine until the Outlook client's migration. Our firewall is ...
1
vote
0answers
265 views

Is there a way to check registry definitions in Forefront on remote systems?

After playing with the script found in This Thread yesterday, I found that the script did exactly what I was looking for. However, I need to run these checks on remote systems on our network. I spent ...
1
vote
1answer
170 views

SCCM migration to SCCM 2012

I am trying to plan a migration from SCCM 2007 to SCCM 2012. I am unable to find if I can migrate the Forefront from SCCM 2007 in SCCM 2012, or if I will have to uninstall all agents and install new ...
0
votes
1answer
161 views

Forefront TMG and IIS on one internet gateway server

I have two servers in a datacenter. One is IIS and another is SQL Server machine. I'd like to install Forefront on a gateway server to make use of "smart" web site publishing and VPN that come with ...
0
votes
1answer
195 views

TMG setup exit with installation failed error when adding network adapter

I have setup a server for TMG installation. When I run setup it works fine until it gives me option to setect network. When I click on add option to select internal network, setup exit and gives an ...
1
vote
0answers
412 views

Syntax for file and process exclusions in Forefront Endpoint Protection?

I can't seem to find an official and up-to-date documentation on how to set up file and process exclusions in Forefront Endpoint Protection 2012. For file types, which of these will work? Are they ...
1
vote
1answer
160 views

How to stop UAG authenticating requests via LDAP

I want UAG to not authenticate ActiveSync requests before passing them on. I can see that at the moment the requests aren't being passed through because UAG checks with LDAP, which says that the user ...
3
votes
2answers
998 views

Does System Center 2012 Endpoint Protection require the use of Configuration Manager?

We have a relatively small organization (~15 users), and have used the ForeFront EndPoint Protection 2010 desktop client without the use of central management, like Configuration Manager. Now that ...
0
votes
2answers
493 views

Setting up a VPN connection before login automatically

Our company's domain controller is located in data center behind the Forefront TMG with a VPN gateway set up. I want my Windows 7 machines to be able to work in an active directory domain ...
0
votes
1answer
206 views

Accessing domain controller in data center

We used to have a domain controller in our local office network. Now we have moved the servers to data center and the dc is there, behind the forefront TMG firewall. In order for my office computers ...
-1
votes
1answer
496 views

Installing forefront identity manager 2010, need a guide/tutorial

Im trying to install forefront identity manager 2010 (FIM) in my test environment. Since I never done it before I need somekind of help how to do it. I've been trying to find a guide or a video that ...
1
vote
0answers
85 views

FIM: Put connector space object in metaverse

I am using Forefront Identity Manager and am new to it. I made a simple management Agent and imported some data in the connector space. I used a "Full Import and Full Synchronisation" Run script. ...
0
votes
1answer
369 views

Trying to setup Exchange 2010 certificate on TMG

I'm running into a problem here, and I'm positive it's simply that I'm not doing something correct (as opposed to it not working). I have a current Exchange 2007 server setup with a third party cert ...
1
vote
1answer
1k views

RDP Certificate Distribution Points

I am receiving the message "Your computer can't connect to the remote computer because the Remote Desktop Gateway's server's certificate has expired or has been revoked" when trying to access a TS ...
1
vote
1answer
596 views

TMG with client certificates for TS Gateway

How to set up client side certificate authentication using an enterprise CA for a TS gateway via Forefront TMG 2010? To date I have executed the following: I have a Terminal Services Gateway ...
1
vote
0answers
165 views

Custom “no access” page on TMG publishing

We have a number of web sites that are hosted on a server inside our corporate network. A Forefront TMG is an internet gateway for the network. We have done a web site publishing through forefront. ...
1
vote
1answer
434 views

Secure Skype traffic through Forefront

How can I allow Skype to function correctly with restricted outbound ports, HTTPS inspection and the IE proxy enabled? All the documentation I've come across suggest disabling at least one of these ...
0
votes
2answers
306 views

Forefront TMG - segregate authenticated traffic

I am running Forefront TMG SP1 rollup 3. All desktop clients will have the Firewall Client installed. Servers will not. I would like to segregate my outbound network traffic according to traffic ...
1
vote
5answers
370 views

Cisco 2811 to Forefront - stop broadcast traffic

I recently upgraded from an old ISA to a Forefront box. I'm now receiving a ton of 0xc0040050 errors. The vast majority are to an internal broadcast address - 100.100.100.255. This is a legacy subnet ...
0
votes
2answers
231 views

Forefront TMG page denied display

Forefront TMG - URL categorization reason not displays although it should be for denied pages. I have tried all the available checkboxes on the Forefront rule regarding the message displayed with no ...
0
votes
1answer
452 views

Main mode SA stopped responding?

I'm having connection problems with a site to site VPN. My site uses Forefront TMG box, the remote site a Cisco VPN concentrator. The connection is dropping frequently. The only entry that shows up ...
1
vote
1answer
476 views

789 connecting Forefront VPN

I am receiving event 789 when connecting to my Forefront TMG VPN server from windows 7 clients via L2TP. This does not occur on XP systems. I've run through the debugging at ...
4
votes
2answers
504 views

Is it hard to set up Microsoft Forefront Endpoint protection?

I have seen that Microsoft Forefront Endpoint protection has pretty decent pricing, although it seems to require a separate System Configuration Manager installed that's quite pricey. I am currently ...
0
votes
2answers
78 views

Since MS ForeFront firewall is installed the network is going crazy

a few weeks ago we installed the new MS Forefront Firewall server. Since that day we have trouble in our network. example: a user is trying to visit www.google.com -> his browser opens ...
0
votes
1answer
439 views

Exchange online mark email as spam from a legitimate address?

A client of us, working for a college, is using his work email to send us questions regarding a SharePoint implementation we have done. A couple of weeks ago we stopped recieving emails from him and ...
1
vote
1answer
292 views

Removing ForeFront Client Security and MOM Server - How to repoint managed clients to unmanaged?

Like the title says, how can I remove FCS and MOM and not have the clients wait for updates from the server and go on its own to get updates from Windows Update automatically? Reason for this is we ...
0
votes
1answer
168 views

Hostname change not reflected in MOM 2005

So I have a bit of a weird thing here. I was testing Forefront with MOM 2005 and WSUS and ran into a problem. One of the computers I was testing with had to be re-imaged due to a failed SP update. ...
1
vote
1answer
15k views

Forefront TMG Proxy blocking internal HTTP requests for FQDN

I have Forefront TMG installed as a proxy server. However, whenever I make HTTP requests to servers on the Internal network with a fully qualified DNS name, the proxy denies the connection. Denied ...
2
votes
3answers
2k views

Forefront TMG 2010: Can you monitor realtime TCP connections and bandwidth on a per-user basis?

I'm just starting a trial of ForeFront TMG to use as a proxy server. I know I can get a real time activity monitor and filter on a per user basis, but would like to be able to get a real time ...
0
votes
1answer
282 views

Forefront TMG - URL Overrides - how long does it take for them to come into play?

Adding a URL to a category seems seems to take an age, somewhere along the lines of 3 to 4 hours. Is this normal behaviour? Could someone tell me what is the default length of time that it takes ...
2
votes
0answers
492 views

How does ForeFront UAG implement single sign-on?

One feature of Forefront is the ability to pre-authenticate external users before their requests are sent to a published web application. In addition, it is supposed to be able to forward the ...
3
votes
1answer
2k views

Limiting bandwidth of workstations in MS Forefront TMG

We have configured Microsoft forefront TMG 2010 Enterprise as the cache server which provides internet access for all computers in our department. Is there any way to limit download speed per ...
0
votes
1answer
2k views

Share the same subnet between Internal network and VPN Clients

I would like to set up a configuration where VPN clients connecting to my Forefront TMG can access all the resources of my Internal network without having the to use the option "Use default gateway ...
0
votes
1answer
3k views

Network outside internal not reaching TMG Forefront 2010 (Hyper-V environment)

Below is my environment: I have 1 physical machine running Windows 2008 R2, with the Hyper-V role. This machine has 3 physical NICs: One for Internet One for Internal Network One for Wireless ...
0
votes
2answers
844 views

Convert IP Address format from ForeFront Firewall logs with SQL

I am trying to query IP addresses from Forefront Firewall logs, and I am a little stuck on the IP formatting C0A8E008-FFFF-0000-0000-000000000000 Can anyone give me the MSSQL command to turn this ...
1
vote
4answers
501 views

Putting a Windows DC, Exchange in a DMZ

I have one guy at my company telling me that I should put FF:TMG in between my main Internet-facing firewall (Cisco 5510) and put my Exchange server and DC on the internal network. I have another guy ...
0
votes
1answer
4k views

Open source alternative to ISA/Forefront TMG?

I'm using Forefront TMG to do web server publishing & SSO and very little else. Are there any open source alternatives that can satisfy all (or at least most) of these features: Web server ...
1
vote
1answer
460 views

Forefront Client Security On Server with Exchange 2010

If we install Forefront Client Security on a Server which already has Forefront for Exchange 2010 is it smart enough to exclude all of the exchange directories/process/file extensions as suggested by ...