Tagged Questions

Forefront is Microsoft's umbrella brand for Security, Identity and Access Management products. Note: Questions tagged *Forefront* should usually be tagged as something more specific.

learn more… | top users | synonyms (1)

0
votes
0answers
11 views

How to make Forefront TMG build VPN site-to-site tunnel with reduced subnet

I am trying to implement a Site-to-Site VPN tunnel with a supplier. We are using Forefront TMG 2010 SP2 (Site A) and they are using Cisco ASA (Site B) I have complete access to SITE A, but no access ...
1
vote
0answers
33 views

Can end user using Forefront Identity Manager to leave security group?

In our company, users logon their desktop with AD and access Sharepoint using Windows authentication. Our users frequency changing teams. After they changed team, their access to old Sharepoint team ...
0
votes
1answer
503 views

Forefront TMG is Stop Internet after few min after enabling HTTPS Inspection

Forefront TMG is Stop Internet after few min after enabling HTTPS Inspection, specialty I am enable to block other https websites but gmail is not blocking till i enable https inspection & if i ...
1
vote
0answers
28 views

Can Forefront TMG server as an outbound chacheing solution to a web farm

We are to deploy several web servers in a datacenters. All running Windows 2K12 + IIS. I am not very familiar with data center best practices for deploying and maintaining web servers. In the office ...
1
vote
1answer
83 views

To expose MS CRM to the internet: Should we use IFD or something like Forefront UAG?

In our company we plan to expose our MS CRM 2011 system to the internet to make it easier to access from the outside. As far as I can see there are basically 2 alternatives: Make an Internet Facing ...
1
vote
1answer
201 views

FIM CM Broken After Manual Cert Renewal

I recently attempted to renew the certificate for the clmAgent user account according to these directions: http://technet.microsoft.com/en-us/library/hh149034%28v=ws.10%29.aspx I logged in with the ...
1
vote
0answers
88 views

SCCM 2007 + FEP 2010 deployment - when can I upgrade sql server?

I am in the process of migrating our forefront client security installation on the domain over to a forefront endpoint protection based on system center configuration manager 2007 platform. I have ...
1
vote
1answer
209 views

Is there a way to get more detailed logging out of Forefront TMG 2010

I am troubleshooting VPN connectivity issues with Forefront TMG. Everything looks correct in configuration but the packets are blocked regardless. The logs are not very descriptive. I see: Denied ...
1
vote
1answer
166 views

SCCM migration to SCCM 2012

I am trying to plan a migration from SCCM 2007 to SCCM 2012. I am unable to find if I can migrate the Forefront from SCCM 2007 in SCCM 2012, or if I will have to uninstall all agents and install new ...
4
votes
5answers
2k views

How do I find the WSUS server that my computers are connecting to for Windows Updates?

I have multiple WSUS servers setup on our domain; one is handling Windows Updates, while another is setup to only do Endpoint Protection updates (via SCCM 2012). Endpoint Updates are working properly ...
1
vote
1answer
56 views

Forefront Identity Manager 2010 no users

I've been scratching my head for a day or so trying to learn FIM. I attempted to walk through this tutorial which is one of the things I want to use it for - but I couldn't get it to work (users ...
2
votes
3answers
1k views

Forefront UAG vs. Server 2012 Direct Access

So I'm working on bringing my company into the 21'st century, with virtual servers, active directory, ADFS, SSO etc. Its a huuuuge project, with a future goal of ISO 27001 cerification. The current ...
1
vote
0answers
89 views

Installing VirtualBox disables Forefront

I have a Lenovo ThinkPad T520, less than a year old, running Windows 7 Ultimate. After I install VirtualBox (it has happened with several versions), Forefront Endpoint Protection 2010 no longer ...
1
vote
0answers
403 views

Syntax for file and process exclusions in Forefront Endpoint Protection?

I can't seem to find an official and up-to-date documentation on how to set up file and process exclusions in Forefront Endpoint Protection 2012. For file types, which of these will work? Are they ...
2
votes
1answer
1k views

Does Microsoft TMG 2010 handle websockets, at least through SSL?

I thought in my own insanity that if I published an IIS 8 web server with websockets through HTTPS there shouldn't be a problem even with the TMG. However, regardless of publishing, filtering and ...
0
votes
2answers
3k views

Forefront TMG 2010 RDP Connections without non-standard ports

From my reading, it looks like the Forefront TMG will not allow the passing of RDP connections through the firewall without configuring a non-standard port for each IP address of the internal servers ...
-2
votes
2answers
388 views

TMG: Allowed user groups and weird group names

I am trying to setup a basic PPTP VPN connection using Forefront TMG 2010. Whenever I try to connect to the VPN connection from my Windows 7 machine, I get an error related to unauthorized access. So ...
1
vote
1answer
149 views

Will Forefront 2010 Antispam/Antivirus protection work on all-in-one Exchange 2010 servers in DAG

We have 2 Exchange 2010 servers with every single role on each. Servers are in DAG mode and they have TMG 2010 as entry point and doing as load balancer. Can I install Forefront 2010 on both Exchange ...
0
votes
1answer
1k views

Disable Forefront Endpoint Protection 2010 Desktop Alerts

Is it possible to disable desktop alerts for FEP 2010, without disabling realtime protection? I.e., the notification that pops up that says: We want to maintain realtime protection, neutralise ...
0
votes
1answer
217 views

Book for Forefront Identity Manager 2010

I can't believe it but I am not able to find a book for Forefront Identity Manager 2010. I am looking for a Administrator's Guide or something like that. Any suggestions?
1
vote
1answer
1k views

Exchange 2010 and FPE Content Filtering

I have a box running Server 2008 R2, Exchange 2010 SP1, and Forefront Protection for Exchange 2010. The issue is that I cannot for the life of me get my content filters to quarantine a single message ...
0
votes
1answer
1k views

Sporadic HTTP 408 response on pages behind MS Forefront TMG 2010

I'm getting sporadic HTTP 408 responses when I try to load pages from my site. The network is set up with Forefront acting as a proxy in front of the web server. When I first load the page, it comes ...
3
votes
1answer
410 views

Issues with Forefront for Exchange file filter

I have an issue where I want to strip some image attachments from emails. Using Forefront for Exchange I can create a file filter rule based on attachment name, type, and size. This initially seemed ...
1
vote
0answers
332 views

How do I add a new full admin account to SCCM 2007?

I want to install Forefront Endpoint Protection on my SCCM server using a new service account that I just created specifically for this purpose. I'll be using a separate reporting database so I'll ...
0
votes
2answers
302 views

Forefront TMG - segregate authenticated traffic

I am running Forefront TMG SP1 rollup 3. All desktop clients will have the Firewall Client installed. Servers will not. I would like to segregate my outbound network traffic according to traffic ...
1
vote
5answers
366 views

Cisco 2811 to Forefront - stop broadcast traffic

I recently upgraded from an old ISA to a Forefront box. I'm now receiving a ton of 0xc0040050 errors. The vast majority are to an internal broadcast address - 100.100.100.255. This is a legacy subnet ...
0
votes
2answers
231 views

Forefront TMG page denied display

Forefront TMG - URL categorization reason not displays although it should be for denied pages. I have tried all the available checkboxes on the Forefront rule regarding the message displayed with no ...
1
vote
2answers
360 views

Remove one's domain from general spam blacklist

We've a problem similar to the question Getting a domain name off of the blacklist but the solutions posted there doesn't help. The problem I'm facing is that our domain is probably marked ...
4
votes
1answer
3k views

Forefront Protection for Exchange - Allowed sender still delivered to Junk Mail

I've got a fresh install of Server 2008 R2 SP1, Exchange 2010 SP1, and Forefront 2010 Protection for Exchange. All on the same box, Exchange is CAS/Hub/MBS. This is a testing box, looking to evaluate ...
0
votes
1answer
529 views

ForeFront TMG 2010 - Topology Question

Total 4 NICs NIC1 - LAN interface NIC2 - WAN 1 (ISP - A) NIC3 - WAN 2 (ISP - B) NIC4 - DMZ (ISP - C with Public IP Pool) Hi All, 3 ISP Connections 2 For Internet use (Local LAN Internet Access ...
1
vote
1answer
2k views

General Forefront TMG 2010 network / proxy configuration

We have decided to test and then deploy a Forefront TMG server on our network of 50 - 75 users (Windows 7, XP Clients, Windows Server 2008R2 Servers and a few Linux Boxes) Our Network Topology is : ...
1
vote
2answers
2k views

SCCM 2007 not installing Forefront Endpoint Protection client

We've recently upgraded from Forefront Endpoint Protection 2007 to 2010 and it now needs SCCM to deploy the clients, so we are using SCCM for the first time and struggling a little bit. SCCM is fully ...
2
votes
2answers
190 views

How to configure a windows phone 7 to access website behind Forefront Threat Management Gateway

As in the title. We have a WCF service, and a Windows Phone 7 client. One of our customers wants to install the service behind a TMG server. I know that TMG is an update to the old ISA server and I ...
1
vote
0answers
293 views

Scan a NAS Device with Microsoft Forefront Endpoint Protection

We are having problems with viruses sneaking through our virus scanner and onto our NAS and I want to scan the whole NAS. If I attempt to run a scan on the whole drive using the GUI for Forefront ...
2
votes
3answers
608 views

Does MS Forefront TMG cache authentication?

I'm testing a client machine that makes requests to a biztalk server using a forefront machine as a web proxy. Upon first test I put in an invalid name/password into the receive port and received the ...
1
vote
1answer
3k views

Unable to join the domain?

I am having difficulties in joining my Windows Server to the domain, may I know what could be the problem ? I suspect that there is a firewall in between this DR internal site and the DMZ where this ...
1
vote
1answer
934 views

Redundancy and Automated failover using Forefront TMG 2010 Standard between Production-DR site?

I'm using MS TMG 2010 Standard as my single firewall to publish my Exchange Server and IIS website to the internet, however it is just one VM in the DMZ network with just one network card (vNIC), what ...
3
votes
1answer
2k views

Limiting bandwidth of workstations in MS Forefront TMG

We have configured Microsoft forefront TMG 2010 Enterprise as the cache server which provides internet access for all computers in our department. Is there any way to limit download speed per ...
0
votes
1answer
2k views

Share the same subnet between Internal network and VPN Clients

I would like to set up a configuration where VPN clients connecting to my Forefront TMG can access all the resources of my Internal network without having the to use the option "Use default gateway ...
0
votes
1answer
2k views

Network outside internal not reaching TMG Forefront 2010 (Hyper-V environment)

Below is my environment: I have 1 physical machine running Windows 2008 R2, with the Hyper-V role. This machine has 3 physical NICs: One for Internet One for Internal Network One for Wireless ...
2
votes
2answers
477 views

Physical vs Virtual machine (HyperV R2) for Threat Management Gateway 2010 (TMG 2010)

What are the GOOD and BAD sides of using physical machine and what are the GOOD and BAD sides of using virtual machine (Hyper-V R2) for hosting TMG 2010 in NLB (aka 2 x TMG 2010)? We're planning ...
3
votes
4answers
4k views

Forefront TMG vs pfSense

We currently run pfSense with no problems, however we are looking at TMG as it is included in our partner subscription to MS and allows Windows 7 DirectConnect features to our domain for off-site ...
1
vote
1answer
1k views

TMG Array + Network Load Balancing

I have a pretty simple TMG array setup that is managed by an EMS server. The 2 servers that is in the array TMG01 and TMG02 sits in my DMZ and talks to the EMS server that is on my internal network. ...
0
votes
1answer
2k views

Content Filter is enabled and the last definition update was over 12 hours ago

Microsoft Forefront Protection for exchange server 2010 has been installed and I get updates for all of the engines except the spam one. These are the health points I have installed: Spam ...
1
vote
2answers
2k views

forefront TMG 2010 … UPnP Port mapping

I've tried googling the answer for a few days now, have come up with very little apart from http://retrohack.com/how-to-enable-xbox-live-behind-tmg-2010/ but can only publish ports on 1 ip ...
0
votes
1answer
136 views

Microsoft Forefront Management Gateway 2010 - Which topology to choose for monitoring only server?

I've installed Forefront and wanted to use it as monitoring traffic solution until we decide to put it as a router. I've 2 nic's assigned to this virtual machine. One NIC has connected port which is ...
0
votes
2answers
431 views

Forefront 2010 as my firewall solution, suitable?

I need to lock down my Windows Server. Is Forefront 2010 ideal for my circumstances? These are: -I am the single user of my server -I RDP from other machines (eg the laptop). -I currently have no ...
1
vote
1answer
1k views

Forefront 2010 Antispam vs Exchange 2010 Antispam?

They look pretty similar, do they work together or independently? For example you have content filtering in Forefront where you can specify SCL barriers, just like in Exchange. However theres no ...