Microsoft Forefront Threat Management Gateway 2010 is the current version of the product previously known as ISA Server. TMG 2010 adds subscription-based URL filtering and malware protection, the free-subscription-based Microsoft IPS Network Inspection System, and HTTPS inspection.

learn more… | top users | synonyms (1)

1
vote
2answers
900 views

Forefront 0xc0040017

I recently began to receive a huge (600 thousand to 2 million per day) number of FWX_E_TCP_NOT_SYN_PACKET_DROPPED, 0xc0040017 entries in my Forefront TMG logs. If the top 3 source IPs are any ...
1
vote
1answer
477 views

789 connecting Forefront VPN

I am receiving event 789 when connecting to my Forefront TMG VPN server from windows 7 clients via L2TP. This does not occur on XP systems. I've run through the debugging at ...
2
votes
1answer
140 views

Does TMG Reporting hate the month of July?

We have a ForeFront TMG 2010 SP1 installation. Reporting in the past has worked great. However, I now need to find out why we've ripped through half our monthly quota in the first 6 days of the ...
1
vote
1answer
1k views

How to install TMG 2010 for SBS 2011

I would like to install TMG 2010 for an SBS 2011 installation. I only have one physical server. I'd like to know if the SBS premium add-on windows 2008 R2 license can be installed on a virtual server ...
1
vote
2answers
989 views

Should I Run TMG as a Hyper-V Guest

Okay here's an interesting question. In two parts: Is it advisable to run TMG as a hyper-v guest in production? (something is nagging me that it's not a good idea, but it's possible to give a VM ...
1
vote
1answer
2k views

General Forefront TMG 2010 network / proxy configuration

We have decided to test and then deploy a Forefront TMG server on our network of 50 - 75 users (Windows 7, XP Clients, Windows Server 2008R2 Servers and a few Linux Boxes) Our Network Topology is : ...
2
votes
2answers
191 views

How to configure a windows phone 7 to access website behind Forefront Threat Management Gateway

As in the title. We have a WCF service, and a Windows Phone 7 client. One of our customers wants to install the service behind a TMG server. I know that TMG is an update to the old ISA server and I ...
0
votes
1answer
573 views

TMG slow when publish web farm

When I publish a single web server (HTTP, no authentication) it works fine, page response under a second. However publish a web farm (two web servers) the response time increases to 20-30 seconds ...
2
votes
2answers
2k views

TMG/ISA FWX_E_NETWORK_RULES_DENIED

I've got three disparit networks that all terminate at a TMG machine. I am trying to communicate between two of these networks, but the TMG firewall keeps dropping the connection as ...
1
vote
0answers
211 views

Can I map IP addresses to allow 2 site to site VPNs with same IP range using Microsoft TMG

I have a Microsoft TMG server with a number of site-2-site VPNs which all have different IP address ranges. Now a client has asked for another site-2-site VPN but their IP range clashes with an ...
1
vote
2answers
6k views

Configuring TMG to allow a connection through the firewall

Here's the basic outline of the problem: I'm trying to ping from 192.168.0.2 to 192.168.10.2, but the ping dies on reaching 192.168.10.1. Obviously TMG is blocking it with the firewall. :) ...
2
votes
3answers
1k views

Are there other application layer firewalls like Microsoft TMG (ISA) that do advanced http rules?

Since the old days, ISA and now TMG have had several great features that I often want to deploy to my customers because of the enhanced functionality and security, but often the cost of an additinal ...
1
vote
1answer
15k views

Forefront TMG Proxy blocking internal HTTP requests for FQDN

I have Forefront TMG installed as a proxy server. However, whenever I make HTTP requests to servers on the Internal network with a fully qualified DNS name, the proxy denies the connection. Denied ...
2
votes
3answers
2k views

Forefront TMG 2010: Can you monitor realtime TCP connections and bandwidth on a per-user basis?

I'm just starting a trial of ForeFront TMG to use as a proxy server. I know I can get a real time activity monitor and filter on a per user basis, but would like to be able to get a real time ...
0
votes
1answer
282 views

Forefront TMG - URL Overrides - how long does it take for them to come into play?

Adding a URL to a category seems seems to take an age, somewhere along the lines of 3 to 4 hours. Is this normal behaviour? Could someone tell me what is the default length of time that it takes ...
1
vote
1answer
954 views

Redundancy and Automated failover using Forefront TMG 2010 Standard between Production-DR site?

I'm using MS TMG 2010 Standard as my single firewall to publish my Exchange Server and IIS website to the internet, however it is just one VM in the DMZ network with just one network card (vNIC), what ...
3
votes
1answer
2k views

Limiting bandwidth of workstations in MS Forefront TMG

We have configured Microsoft forefront TMG 2010 Enterprise as the cache server which provides internet access for all computers in our department. Is there any way to limit download speed per ...
0
votes
1answer
557 views

Fail to start TMG server

Is there any conflict between Backup EXEC 2010 Remote agent and TMG Server (on 2008 R2)? Because when I install Backup EXEC 2010 Remote agent on TMG Server, server failed to start!!! and after ...
1
vote
2answers
2k views

How do I allow access to a service running on a Forefront TMG Server?

I'm setting up Zabbix for monitoring on our network. So far everything is going well, the agent is installed on all the servers. All the servers except the Forefront one are communicating with the ...
1
vote
2answers
979 views

VPN access configuration with ForeFront TMG

I am trying to configure VPN Client access with Microsoft ForeFront TMG 2010. When I try to add domain groups to allow access to them, under Group column I can only see the SID of the domain group. ...