Microsoft Forefront Threat Management Gateway 2010 is the current version of the product previously known as ISA Server. TMG 2010 adds subscription-based URL filtering and malware protection, the free-subscription-based Microsoft IPS Network Inspection System, and HTTPS inspection.

learn more… | top users | synonyms (1)

0
votes
0answers
18 views

Cannot block team viewer through TMG Server 2010

I am just re configuring the firewall in our computer lab and I have created a block URL list. In it are the URL's to the team viewer: http://dyngate.com/ http://teamviewer.com/ This is set ...
0
votes
0answers
37 views

SSTP VPN via TMG - Connection failing due to root certificate not trusted by trust provider?

I'm attempting to deploy an SSTP VPN via TMG. I've created a self-signed certificate and have added it to the Trusted Root Certification Authorities store on the client PC. When attempting to ...
1
vote
0answers
76 views

Set up TMG as a reverse proxy, https-to-http

tl;dr I'm having trouble getting TMG to properly reverse proxy an HTTPS connection on the outside, to an HTTP connection on the inside. We have a LAN (10.0.7.0/24) that hosts a Windows Server 2008 ...
1
vote
0answers
35 views

Windows VPN / TMG Server Expired Password Stuck Sending New Password

I have a Windows Server 2008R2 Server running Forefront TMG (7.0.9193.500) which works as our firewall and VPN gateway. For the most part it works, blocking traffic and allowing users to VPN in. I ...
0
votes
1answer
89 views

TMG reverse proxy and basic config

I recently set up TMG2010 and I believe I've done something wrong with my configuration. I do not want to run anything extra apart from a web publishing/reverse proxy setup. My internet goes to an ...
1
vote
0answers
102 views

Route between two branch offices via IPsec VPN to head office?

I have TMG 2010 running on Server 2008 R2 in our head office with 2 branch offices connecting in using Dray Tek 2930 routers with IPsec site to site VPNS. The remote sites can route between the head ...
1
vote
1answer
85 views

TMG returns uncompressed content response from IIS

I'm fighting with my customer's TMG for a few days already and I'm out of ideas. I hope you can help me. As I understand it TMG is set as a proxy between Internet and local computer with IIS with my ...
0
votes
0answers
92 views

Two NLB mutlicast clusters on the same VLAN processing same traffic

I have an older ISA2006 based NLB cluster which I plan to migrate to a new TMG2010 NLB cluster. I need to have both clusters active for some time during migration (with different IPs of course). Both ...
4
votes
2answers
943 views

IPSec tunnel on ASA keeps disconnecting

I have an ASA IPSec tunnel configured between an ASA5505 and Microsoft TMG 2010 SP2. The tunnel sometimes works for a few hours, and then disconnects, and other times it works for 5 minutes and then ...
0
votes
1answer
128 views

Can browse ftp.microsoft.com but not our own FTP site in IE

We want to have an FTP site that works the same way ftp://ftp.microsoft.com works. We want to be able to browse the FTP site in web browsers. It seems that just recently, users are unable to ...
4
votes
2answers
160 views

Why bother reverse proxying applications if you aren't using mod_security or TMG/UAG?

Common wisdom is that internal applications that live inside of the trusted network, such as Exchange, should be reverse proxies whenever they are exposed to the Internet. Microsoft recommends using ...
2
votes
2answers
247 views

Use a dedicated subnet to connect all routers/firewalls?

I have a couple router/firewall boxes (pfSense, TMG 2010, ISA 2006) on my network that are stateful. Right now they all have an interface on the same subnet as most end user devices and servers. I ...
0
votes
0answers
491 views

How to enable multicast routing in TMG 2010?

I have a TMG 2010 firewall between some office networks, which handles routing and firewalling; I need to let some application-specific multicast traffic flow between these networks; this is UDP ...
0
votes
1answer
927 views

Forefront TMG denied connection using HTTPS listener

I have configured a web publishing rule to allow access to an internal server over HTTP. When i publish the rule everything works as expected. When I change the rule to use a HTTPS listener, the rule ...
1
vote
0answers
2k views

Outlook client behind forefront TMG 2010 unable to connect to External Exchange server

Here is my situation. Our office just got sold and we are working on the migration to the new company's environment. Everything has worked fine until the Outlook client's migration. Our firewall is ...
0
votes
1answer
206 views

Why when i installed TMG i became disconnect and connect from internal network to TMG and external

When I install TMG server 2010 on Windows Server 2008 R2, after some minutes I have request time out in ping of internet and ping of ip address of TMG server. And I became disconnected from TMG and ...
0
votes
1answer
45 views

Url-based web site publishing on Windows Server platform

I have a Windows 2008 Enterprise SP2 server in a datacenter. It is 32bit OS. I need to be able to do a "smart" url-based web site publishing. So that with a single external IP I can publish many sites ...
3
votes
1answer
2k views

How to bypass Forefront TMG for downloading from Adobe Cloud

I hope that this question has not been asked as I've spent a couple of days googling around trying to find a solution. I have one computer that needs to download from Adobe Cloud to install ...
1
vote
1answer
382 views

Publishing a web app listening on two different ports with TMG

We have an internal web app built on some custom Java stuff. The app listens on port 8080, but also uses IIS on port 80 to get user authentication. Opening the site in a browser produces HTTP GETs ...
1
vote
1answer
532 views

Asymmetric routing with two ForeFront TMG 2010 firewalls

I have a bizzarre networking problem. There is a network, a single IP subnet: 192.168.60.0/24. The network has two Internet-connected firewalls (running ForeFront TMG 2010), 192.168.60.253 ...
0
votes
1answer
129 views

Why would one prefer Forefront TMG to products' dedicated proxies? [closed]

Some Microsoft products provide a dedicated proxy for external access, I'm thinking here about TFS Proxy server or Exchange Edge server. Why would one prefer using Forefront TMG as a proxy for these ...
2
votes
2answers
4k views

How can I setup RD Gateway on the same server as TMG?

I have used the following guides with no luck: http://www.rayheffer.com/953/building-a-remote-desktop-gateway-rdg-rd-gateway-server/ ...
3
votes
1answer
200 views

vSphere Site Recovery Manager cannot connect, gives Error 500

I am attempting to set up a vSphere Site Recovery Manager lab. I have two datacenters linked via a site-to-site VPN with Microsoft Threat Management Gateway 2010 SP1. I am attempting to add the two ...
6
votes
3answers
1k views

Best way to authenticate users to the proxy in mobile devices

As example, in Forefront TMG I can have a wpad entry in the DNS and computers discover it and autoconfigure the web proxy. When the user tries to go to the Internet he is promptped for the ...
0
votes
2answers
3k views

Forefront TMG 2010 RDP Connections without non-standard ports

From my reading, it looks like the Forefront TMG will not allow the passing of RDP connections through the firewall without configuring a non-standard port for each IP address of the internal servers ...
1
vote
1answer
1k views

Can Microsoft Forefront TMG handle users that are not part of a domain?

I'm a newbie and please excuse me if my question is so foolish :) Here is the scenario: In our company we have 50 PCs: 40 PCs have joined to the domain and 10 PCs haven't joined to the domain (simply ...
1
vote
1answer
214 views

BGP Multipath & return routes

I'm probably a complete n00b concerning serverfault related questions, but our IT department makes a bold statement I wish to verify. I've searched the internet, but can find nothing related to my ...
1
vote
2answers
5k views

TMG 2010: how to block HTTPS access to certain sites?

Just installed Forefront TMG 2010 and set up firewall rules. My company's policy requires to block access to webmail sites, like gmail, yahoo mail, etc. So I added these webmail domain names to a ...
0
votes
1answer
1k views

How to set up certificate authentication for VPN access to TMG 2010

I found this article (link) on how to set up VPN access to TMG 2010. It's clearly written and easy to follow, however, there are some pre-requisites for this. As I am fairly new to Windows server ...
1
vote
1answer
3k views

TMG 2010 Edge Firewall Setup - Internal subnet has no internet access

I just set up a TMG 2010 server as an edge firewall. The TMG machine has two NICs: LAN: IP-192.168.1.1, Netmask-255.255.255.0, DNS-192.168.1.3, Gateway-(blank) WAN: IP-119.x.x.98, ...
0
votes
1answer
295 views

Implementing TMG over AD

I am a programmer and ask for some help to sysadmins. I've have a Wordpress system (a website) that validates users through an Active Directory, this is done by a plugin. My customer wants to protect ...
3
votes
1answer
294 views

redirect all youtube video requests to a specific one

I'm on an IT team in my company and I would like to block youtube to users. I don't want to just deny access to the whole youtube domain, but only to replace the .flv/.mp4 request with the one that I ...
10
votes
8answers
14k views

ActiveSync devices causing accounts to lockout

When a user changes his account password for whatever reason (read: expired), and the old password is stored in his mobile device connected through EAS. This will cause his account almost immediately ...
5
votes
1answer
1k views

Threat Management Gateway 2010 is killing SQL Connections

My company has just started using TMG 2010 as our Firewall / Web Proxy on a Windows 2008 R2 server. Since moving, all connections to SQL Server are closed after around 30 seconds. For example: ...
2
votes
1answer
400 views

Changing Forefront TMG VPN Certificate

I need to change my TMG server from an old VPN server certificate to a new one due to changing my internal CA structure. Where the heck do I do that? I don't see any certificate references in TMG ...
0
votes
1answer
253 views

Unable to connect to Exchange 2010 server from Entourage 2008

I'm having some issues with setting up Entourage 2008 EWS up to connect with our exchange 2010 server. So I hope someone can answer me the following: I know that there are some issues with our ...
0
votes
1answer
357 views

Trying to setup Exchange 2010 certificate on TMG

I'm running into a problem here, and I'm positive it's simply that I'm not doing something correct (as opposed to it not working). I have a current Exchange 2007 server setup with a third party cert ...
1
vote
1answer
588 views

TMG with client certificates for TS Gateway

How to set up client side certificate authentication using an enterprise CA for a TS gateway via Forefront TMG 2010? To date I have executed the following: I have a Terminal Services Gateway ...
2
votes
3answers
2k views

Allow Broadcast to 255.255.255.255 through TMG/VPN (for NetBios Resolution)

Is it possible to allow a VPN client to do NetBIOS broadcast name resolution through TMG? In the TMG Queries I can see the rule that is blocking ClientIP->255.255.255.255 I've tried adding ...
1
vote
2answers
854 views

Publishing multiple web servers with reverse proxy on localhost, retaining original client IP and hostname

I have been using ISA on Windows Server 2003 to publish multiple web servers hosted on the same machine. Setup as follows: ISA HTTP/S listener bound to 127.0.0.1 + external IP IIS bound to 127.0.0.2 ...
2
votes
3answers
472 views

How to send authentication credentials to a published web site without prepending the AD domain name?

ISA Server 2006 publishing a web site; ISA does forms-based authentication against an Active Directory domain (which ISA itself is joined to), then, if the user is authorized, ISA sends the user's ...
0
votes
2answers
2k views

How to diagnose severe network problems in small network?

We have fairly small network with managed and unmanaged switches (Netgear GS748T, Linksys SLM2024, DGS-1008D, DES-1008D, DES-1026G, SRW224G4), about 8-10 hosts Hyper-V with multiple virtual machines, ...
0
votes
1answer
1k views

Issuing Computer Certificates to Non-Domain Members (Enterprise CA)

I am trying to implement remote client access using L2TP/IPSec VPN for both domain members and non-members. Domain members is fine and working OK but I am having trouble issuing a certificate to the ...
1
vote
2answers
229 views

Dedicated Server, Multiple VMs on the back, HyperV Up Front… Where do i put TMG?

As a follow up question to How Do i host multiple servers on HyperV with only a few public IP Addresses I am now trying to figure out where to put the ISA/TMG Server? Should it be virtualized, ...
0
votes
1answer
396 views

Exchange 2010 when accessing thru OWA shows 2 prompts for passwords

I've setup Exchange 2010 thru TMG and everything seems to work fine except that when accessing OWA there are 2 screens where you have to enter login and pass. The first one looks exactly the same as ...
1
vote
1answer
2k views

Publishing Activesync through TMG with client certificates (403.7 Forbidden)

I'm trying to publish Exchange 2003 activesync on a Server2K3 box, through TMG 2010 on a 2008R2 box, using client certificate on Android mobiles. From what I can tell, the issue is with TMG, as when ...
0
votes
1answer
5k views

Slow Internet access with TMG 2010 + Windows Server 2008 + ESXI 4.1

We have the following configuration: Windows Server 2008 is installed on Vmware Esxi 4.1 server physical machine - HP server with plenty of resources and no other VMs installed yet. Server 2008 ...
3
votes
2answers
10k views

TMG 2010 does not proxy back to the same network as the request

I have an issue where websites that are hosted on a web server (www.example.com) are not accessible from their own network when accessed via its public IP address, but they are accessible from every ...
2
votes
1answer
3k views

Access FTPS from behind Forefront TMG

I have a web server on which IIS 7 host an SSL-enabled site. The client in am trying to connect with is behind the corporate Forefront TMG. The app is Total Commander - a file manager shell, that has ...
0
votes
2answers
231 views

Forefront TMG page denied display

Forefront TMG - URL categorization reason not displays although it should be for denied pages. I have tried all the available checkboxes on the Forefront rule regarding the message displayed with no ...