Tagged Questions

Microsoft Forefront Threat Management Gateway 2010 is the current version of the product previously known as ISA Server. TMG 2010 adds subscription-based URL filtering and malware protection, the free-subscription-based Microsoft IPS Network Inspection System, and HTTPS inspection.

learn more… | top users | synonyms (1)

0
votes
1answer
74 views

TMG reverse proxy and basic config

I recently set up TMG2010 and I believe I've done something wrong with my configuration. I do not want to run anything extra apart from a web publishing/reverse proxy setup. My internet goes to an ...
0
votes
0answers
70 views

Does TMG allow a no (session) affinity configuration

We are using TMG load balancing but it currently is using session affinity via a cookie (ISAWPLB). We don't want any affinity as our application is stateless. This way we would get a much better ...
0
votes
0answers
483 views

How to enable multicast routing in TMG 2010?

I have a TMG 2010 firewall between some office networks, which handles routing and firewalling; I need to let some application-specific multicast traffic flow between these networks; this is UDP ...
1
vote
1answer
529 views

Asymmetric routing with two ForeFront TMG 2010 firewalls

I have a bizzarre networking problem. There is a network, a single IP subnet: 192.168.60.0/24. The network has two Internet-connected firewalls (running ForeFront TMG 2010), 192.168.60.253 ...
2
votes
3answers
2k views

Allow Broadcast to 255.255.255.255 through TMG/VPN (for NetBios Resolution)

Is it possible to allow a VPN client to do NetBIOS broadcast name resolution through TMG? In the TMG Queries I can see the rule that is blocking ClientIP->255.255.255.255 I've tried adding ...
0
votes
1answer
529 views

ForeFront TMG 2010 - Topology Question

Total 4 NICs NIC1 - LAN interface NIC2 - WAN 1 (ISP - A) NIC3 - WAN 2 (ISP - B) NIC4 - DMZ (ISP - C with Public IP Pool) Hi All, 3 ISP Connections 2 For Internet use (Local LAN Internet Access ...
1
vote
1answer
342 views

Threat Management Gateway can't access share on NAS

My network looks like this: DC - SERVER01 - Windows Server 2008 SBS TMG - TMG01 - Windows Server R2 Standard NAS - DATASTORE - Cisco NSS6000 All machines and devices are joined to the ...
1
vote
1answer
2k views

General Forefront TMG 2010 network / proxy configuration

We have decided to test and then deploy a Forefront TMG server on our network of 50 - 75 users (Windows 7, XP Clients, Windows Server 2008R2 Servers and a few Linux Boxes) Our Network Topology is : ...
0
votes
1answer
1k views

Microsoft TMG high availability not working

I have two Threat Management Gateway Enterprise servers set up in a standalone array for authenticated web proxying. I can verify NLB is working, but when I restart tmgA, which is the array manager, ...
1
vote
2answers
6k views

Configuring TMG to allow a connection through the firewall

Here's the basic outline of the problem: I'm trying to ping from 192.168.0.2 to 192.168.10.2, but the ping dies on reaching 192.168.10.1. Obviously TMG is blocking it with the firewall. :) ...
1
vote
1answer
14k views

Forefront TMG Proxy blocking internal HTTP requests for FQDN

I have Forefront TMG installed as a proxy server. However, whenever I make HTTP requests to servers on the Internal network with a fully qualified DNS name, the proxy denies the connection. Denied ...
2
votes
3answers
2k views

Forefront TMG 2010: Can you monitor realtime TCP connections and bandwidth on a per-user basis?

I'm just starting a trial of ForeFront TMG to use as a proxy server. I know I can get a real time activity monitor and filter on a per user basis, but would like to be able to get a real time ...
0
votes
1answer
280 views

Forefront TMG - URL Overrides - how long does it take for them to come into play?

Adding a URL to a category seems seems to take an age, somewhere along the lines of 3 to 4 hours. Is this normal behaviour? Could someone tell me what is the default length of time that it takes ...
1
vote
1answer
934 views

Redundancy and Automated failover using Forefront TMG 2010 Standard between Production-DR site?

I'm using MS TMG 2010 Standard as my single firewall to publish my Exchange Server and IIS website to the internet, however it is just one VM in the DMZ network with just one network card (vNIC), what ...
1
vote
1answer
1k views

Client VPN works, but only from certain locations (ISA/TMG)

I've done something very simple. Or so I thought... I have setup VPN client access in TMG (or ISA, they're pretty alike). I created a group called VPN in AD, added that as allowed VPN users in TMG, ...
1
vote
0answers
303 views

Microsoft TMG 2010 Sp1 override if authenticated?

I have a TMG 2010 SP1 server running on Server 2008 R2 in a single-NIC configuration - not live yet. I will be allowing web access in three fashions: one method is using the TMG as the default ...
0
votes
1answer
1k views

Threat Management Gateway (TMG) 2010 will not NAT

I've got a TMG 2010 Standard server. Using the Web Proxy works brilliantly, however the server just does not seem to NAT any requests. The clients all have the TMG box set as their default gateway ...
2
votes
1answer
1k views

How do I configure a domain-joined, single NIC TMG box in the DMZ to publish Exchange?

I'd love to see some good guidance on the following scenario: Customer has a requirement to publish Exchange services securely over the Internet. The Customer has an existing hardware firewall and ...
1
vote
2answers
2k views

How do I allow access to a service running on a Forefront TMG Server?

I'm setting up Zabbix for monitoring on our network. So far everything is going well, the agent is installed on all the servers. All the servers except the Forefront one are communicating with the ...
1
vote
2answers
2k views

forefront TMG 2010 … UPnP Port mapping

I've tried googling the answer for a few days now, have come up with very little apart from http://retrohack.com/how-to-enable-xbox-live-behind-tmg-2010/ but can only publish ports on 1 ip ...
0
votes
1answer
340 views

Is it possible to configure TMG to impersonate a domain user for anonymous requests to a website?

I would like to configure Forefront Threat Management Gateway (formerly ISA server) to impersonate a specific domain user for any anonymous request to a particular listener. For example, for any ...
0
votes
1answer
2k views

RRAS vs ISA Server vs Forefront Threat Management Gateway

I was hoping someone could explain to me the differences between RRAS, ISA Server and Forefront Threat Management Gateway. As far as I can tell they all sort of do exactly the same thing? RRAS ...