Questions tagged [microsoft-forefront-2010]

Forefront is Microsoft's umbrella brand for Security, Identity and Access Management products. Note: Questions tagged *Forefront* should usually be tagged as something more specific.

Filter by
Sorted by
Tagged with
1 vote
0 answers
154 views

Forefront 2010 (TMG): infinite redirection loop

The behaviour of the internal web server is to detect an incoming request over HTTP and respond with a 301 response to a HTTPS location (for all or only specific URLs), then TMG interferes and the ...
Simone Nigro's user avatar
0 votes
2 answers
245 views

Sites must use TMG as default Gateway

Last week our Hyper-V server crashed and forced us to rebuild most of our network. While the network has been rebuilt we are having a major problem. We use Forefront TMG to route our web traffic using ...
Travis Grannan's user avatar
0 votes
1 answer
32 views

Forefront 2010 does not let logins using 'Public or Shared Computer'

I have recently inherited a Forefront TMG 2010 server, and when people try to login and select 'This is a public or shared computer' they are unable to login. No errors, just reloads the same page. ...
Hammer's user avatar
  • 39
0 votes
0 answers
482 views

How to create user in AD using FIM 2010 Sync Service Only?

I am new to FIM 2010 R2(MIM 2016). I want to create user in AD from my DB. I have DB that contains student information and based on that I want to create user in AD. I want to perform this action ...
dotnetstep's user avatar
0 votes
1 answer
499 views

Remembering homeMDB & msExchHomeServerName when disabling for later reconnecting

My environment requires me to be able to create Exchange mailboxes on existing users, disable those mailboxes and then, some time later, re-enable them and have Exchange reconnect them automatically ...
foo's user avatar
  • 76
0 votes
1 answer
376 views

FIM2010 R2 SP1 service account requirements on database after installation

We're in the process of updating our Forefront Identity Manager to 2010 R2 SP1. The SQL Server instance for the old installation has the FIM service account in the sysadmin role, as is required for ...
Neghtasro's user avatar
  • 101
1 vote
0 answers
98 views

Can end user using Forefront Identity Manager to leave security group?

In our company, users logon their desktop with AD and access Sharepoint using Windows authentication. Our users frequency changing teams. After they changed team, their access to old Sharepoint team ...
Mark's user avatar
  • 217
1 vote
0 answers
69 views

Manage UAG Server via WinRM

Does anyone know of there is a way to configure a UAG server to work with WinRM? We have a small number of servers and the "Server Manager" application as well as PowerShell are the way we generally ...
Robert Kaucher's user avatar
0 votes
1 answer
45 views

UAG 2010 and Exchange 2010 Service Pack installs

We are currently on Exchange 2010 SP2 and UAG 2010 SP1. I want to upgrade Exchange to SP3, and later on UAG to SP4, but not all at the same time due to scheduling. Ideally we'd like to do Exchange ...
marcwenger's user avatar
2 votes
0 answers
360 views

Forefront UAG with SSL/X509 auth for REST API

I'm not a network engeneer, but a software engeneer, so this theme is quite unfamiliar for me. We develop a solution, that consists of a server-side web application (with a rest api), working on java ...
Mikhail Ivanov's user avatar
0 votes
1 answer
58 views

Single sign-on between two UAG servers

The situation: site1.company.com is published in UAG 1 (Datacenter 1) site2.company.com is published in UAG 2 (Datacenter 2) My question: Is it at all possible to set up a single sign on between ...
Andreas Eriksson's user avatar
0 votes
1 answer
1k views

Forefront TMG is Stop Internet after few min after enabling HTTPS Inspection

Forefront TMG is Stop Internet after few min after enabling HTTPS Inspection, specialty I am enable to block other https websites but gmail is not blocking till i enable https inspection & if i ...
Arifeen's user avatar
1 vote
0 answers
40 views

Can Forefront TMG server as an outbound chacheing solution to a web farm

We are to deploy several web servers in a datacenters. All running Windows 2K12 + IIS. I am not very familiar with data center best practices for deploying and maintaining web servers. In the office ...
Maxim V. Pavlov's user avatar
1 vote
1 answer
256 views

To expose MS CRM to the internet: Should we use IFD or something like Forefront UAG?

In our company we plan to expose our MS CRM 2011 system to the internet to make it easier to access from the outside. As far as I can see there are basically 2 alternatives: Make an Internet Facing ...
Jer's user avatar
  • 131
3 votes
1 answer
4k views

Why does the clipboard not work with RDP through Microsoft's Unified Access Gateway (UAG)?

This one is really driving me nuts... For one of our customers, we are allowed access using the Microsoft Unified Access Gateway, which provides an HTTPS-tunneled way to (among other things) run ...
Per Lundberg's user avatar
1 vote
1 answer
714 views

FIM CM Broken After Manual Cert Renewal

I recently attempted to renew the certificate for the clmAgent user account according to these directions: http://technet.microsoft.com/en-us/library/hh149034%28v=ws.10%29.aspx I logged in with the ...
Ryan Ries's user avatar
  • 55.8k
1 vote
0 answers
144 views

SCCM 2007 + FEP 2010 deployment - when can I upgrade sql server?

I am in the process of migrating our forefront client security installation on the domain over to a forefront endpoint protection based on system center configuration manager 2007 platform. I have ...
TWood's user avatar
  • 295
1 vote
1 answer
797 views

Is there a way to get more detailed logging out of Forefront TMG 2010

I am troubleshooting VPN connectivity issues with Forefront TMG. Everything looks correct in configuration but the packets are blocked regardless. The logs are not very descriptive. I see: Denied ...
Dina's user avatar
  • 189
1 vote
1 answer
275 views

SCCM migration to SCCM 2012

I am trying to plan a migration from SCCM 2007 to SCCM 2012. I am unable to find if I can migrate the Forefront from SCCM 2007 in SCCM 2012, or if I will have to uninstall all agents and install new ...
colo_joe's user avatar
4 votes
6 answers
24k views

How do I find the WSUS server that my computers are connecting to for Windows Updates?

I have multiple WSUS servers setup on our domain; one is handling Windows Updates, while another is setup to only do Endpoint Protection updates (via SCCM 2012). Endpoint Updates are working properly ...
christopher's user avatar
0 votes
1 answer
272 views

UAG Direct Access 2 node Array wipes the IIS web site for NLS that is configured on the same box when DA is Activated

any help would be awesome, I have created a two node UAG Direct Access array, although not best practice I have setup NLS website on the UAG DA servers. Every time I click Activate on the Forefront ...
Steve's user avatar
  • 11
1 vote
1 answer
101 views

Forefront Identity Manager 2010 no users

I've been scratching my head for a day or so trying to learn FIM. I attempted to walk through this tutorial which is one of the things I want to use it for - but I couldn't get it to work (users don'...
Natalie Adams's user avatar
3 votes
3 answers
2k views

Forefront UAG vs. Server 2012 Direct Access

So I'm working on bringing my company into the 21'st century, with virtual servers, active directory, ADFS, SSO etc. Its a huuuuge project, with a future goal of ISO 27001 cerification. The current ...
Matt Bear's user avatar
  • 874
1 vote
0 answers
153 views

Installing VirtualBox disables Forefront

I have a Lenovo ThinkPad T520, less than a year old, running Windows 7 Ultimate. After I install VirtualBox (it has happened with several versions), Forefront Endpoint Protection 2010 no longer ...
yakatz's user avatar
  • 1,243
1 vote
1 answer
2k views

Syntax for file and process exclusions in Forefront Endpoint Protection?

I can't seem to find an official and up-to-date documentation on how to set up file and process exclusions in Forefront Endpoint Protection 2012. For file types, which of these will work? Are they ...
Massimo's user avatar
  • 71.2k
3 votes
1 answer
5k views

Does Microsoft TMG 2010 handle websockets, at least through SSL?

I thought in my own insanity that if I published an IIS 8 web server with websockets through HTTPS there shouldn't be a problem even with the TMG. However, regardless of publishing, filtering and ...
Oskar Duveborn's user avatar
0 votes
2 answers
5k views

Forefront TMG 2010 RDP Connections without non-standard ports

From my reading, it looks like the Forefront TMG will not allow the passing of RDP connections through the firewall without configuring a non-standard port for each IP address of the internal servers ...
emhohensee's user avatar
1 vote
1 answer
208 views

How to stop UAG authenticating requests via LDAP

I want UAG to not authenticate ActiveSync requests before passing them on. I can see that at the moment the requests aren't being passed through because UAG checks with LDAP, which says that the user ...
Meir's user avatar
  • 171
-2 votes
3 answers
942 views

TMG: Allowed user groups and weird group names

I am trying to setup a basic PPTP VPN connection using Forefront TMG 2010. Whenever I try to connect to the VPN connection from my Windows 7 machine, I get an error related to unauthorized access. So ...
Moon's user avatar
  • 119
1 vote
1 answer
176 views

Will Forefront 2010 Antispam/Antivirus protection work on all-in-one Exchange 2010 servers in DAG

We have 2 Exchange 2010 servers with every single role on each. Servers are in DAG mode and they have TMG 2010 as entry point and doing as load balancer. Can I install Forefront 2010 on both Exchange ...
MadBoy's user avatar
  • 3,745
0 votes
1 answer
2k views

Disable Forefront Endpoint Protection 2010 Desktop Alerts

Is it possible to disable desktop alerts for FEP 2010, without disabling realtime protection? I.e., the notification that pops up that says: We want to maintain realtime protection, neutralise ...
Matt's user avatar
  • 1,893
0 votes
1 answer
274 views

Book for Forefront Identity Manager 2010 [closed]

I can't believe it but I am not able to find a book for Forefront Identity Manager 2010. I am looking for a Administrator's Guide or something like that. Any suggestions?
juergen d's user avatar
  • 248
1 vote
1 answer
2k views

Exchange 2010 and FPE Content Filtering

I have a box running Server 2008 R2, Exchange 2010 SP1, and Forefront Protection for Exchange 2010. The issue is that I cannot for the life of me get my content filters to quarantine a single message ...
Ethan Hohensee's user avatar
0 votes
1 answer
2k views

Sporadic HTTP 408 response on pages behind MS Forefront TMG 2010

I'm getting sporadic HTTP 408 responses when I try to load pages from my site. The network is set up with Forefront acting as a proxy in front of the web server. When I first load the page, it comes ...
Brian's user avatar
  • 230
3 votes
1 answer
599 views

Issues with Forefront for Exchange file filter

I have an issue where I want to strip some image attachments from emails. Using Forefront for Exchange I can create a file filter rule based on attachment name, type, and size. This initially seemed ...
JoeB's user avatar
  • 113
1 vote
0 answers
854 views

How do I add a new full admin account to SCCM 2007?

I want to install Forefront Endpoint Protection on my SCCM server using a new service account that I just created specifically for this purpose. I'll be using a separate reporting database so I'll ...
Keith's user avatar
  • 311
0 votes
2 answers
487 views

Forefront TMG - segregate authenticated traffic

I am running Forefront TMG SP1 rollup 3. All desktop clients will have the Firewall Client installed. Servers will not. I would like to segregate my outbound network traffic according to traffic ...
Tim Brigham's user avatar
  • 15.6k
1 vote
5 answers
603 views

Cisco 2811 to Forefront - stop broadcast traffic

I recently upgraded from an old ISA to a Forefront box. I'm now receiving a ton of 0xc0040050 errors. The vast majority are to an internal broadcast address - 100.100.100.255. This is a legacy subnet ...
Tim Brigham's user avatar
  • 15.6k
0 votes
2 answers
382 views

Forefront TMG page denied display

Forefront TMG - URL categorization reason not displays although it should be for denied pages. I have tried all the available checkboxes on the Forefront rule regarding the message displayed with no ...
Tim Brigham's user avatar
  • 15.6k
1 vote
2 answers
743 views

Remove one's domain from general spam blacklist

We've a problem similar to the question Getting a domain name off of the blacklist but the solutions posted there doesn't help. The problem I'm facing is that our domain is probably marked ...
faulty's user avatar
  • 235
4 votes
1 answer
4k views

Forefront Protection for Exchange - Allowed sender still delivered to Junk Mail

I've got a fresh install of Server 2008 R2 SP1, Exchange 2010 SP1, and Forefront 2010 Protection for Exchange. All on the same box, Exchange is CAS/Hub/MBS. This is a testing box, looking to evaluate ...
Chris S's user avatar
  • 78.2k
0 votes
1 answer
739 views

ForeFront TMG 2010 - Topology Question

Total 4 NICs NIC1 - LAN interface NIC2 - WAN 1 (ISP - A) NIC3 - WAN 2 (ISP - B) NIC4 - DMZ (ISP - C with Public IP Pool) Hi All, 3 ISP Connections 2 For Internet use (Local LAN Internet Access – ...
Mutahir's user avatar
  • 2,357
1 vote
1 answer
3k views

UAG Direct Access - Exporting GPO to offline hosts

I'm probably missing something here, but I couldn't find any reference to this. I have a host that is using Direct Access from a remote location. We had to make changes on the server side and ofc, ...
Oren's user avatar
  • 33
2 votes
1 answer
3k views

General Forefront TMG 2010 network / proxy configuration

We have decided to test and then deploy a Forefront TMG server on our network of 50 - 75 users (Windows 7, XP Clients, Windows Server 2008R2 Servers and a few Linux Boxes) Our Network Topology is : ...
Mutahir's user avatar
  • 2,357
1 vote
2 answers
2k views

SCCM 2007 not installing Forefront Endpoint Protection client

We've recently upgraded from Forefront Endpoint Protection 2007 to 2010 and it now needs SCCM to deploy the clients, so we are using SCCM for the first time and struggling a little bit. SCCM is fully ...
Kieran Walsh's user avatar
2 votes
2 answers
228 views

How to configure a windows phone 7 to access website behind Forefront Threat Management Gateway

As in the title. We have a WCF service, and a Windows Phone 7 client. One of our customers wants to install the service behind a TMG server. I know that TMG is an update to the old ISA server and I ...
Preet Sangha's user avatar
  • 2,747
1 vote
0 answers
405 views

Scan a NAS Device with Microsoft Forefront Endpoint Protection

We are having problems with viruses sneaking through our virus scanner and onto our NAS and I want to scan the whole NAS. If I attempt to run a scan on the whole drive using the GUI for Forefront ...
Scott Keck-Warren's user avatar
2 votes
3 answers
1k views

Does MS Forefront TMG cache authentication?

I'm testing a client machine that makes requests to a biztalk server using a forefront machine as a web proxy. Upon first test I put in an invalid name/password into the receive port and received the ...
Steven Evers's user avatar
2 votes
1 answer
7k views

Unable to join the domain?

I am having difficulties in joining my Windows Server to the domain, may I know what could be the problem ? I suspect that there is a firewall in between this DR internal site and the DMZ where this ...
Senior Systems Engineer's user avatar
1 vote
1 answer
1k views

Redundancy and Automated failover using Forefront TMG 2010 Standard between Production-DR site?

I'm using MS TMG 2010 Standard as my single firewall to publish my Exchange Server and IIS website to the internet, however it is just one VM in the DMZ network with just one network card (vNIC), what ...
Senior Systems Engineer's user avatar