Questions tagged [microsoft-ftmg-2010]

Microsoft Forefront Threat Management Gateway 2010 is the current version of the product previously known as ISA Server. TMG 2010 adds subscription-based URL filtering and malware protection, the free-subscription-based Microsoft IPS Network Inspection System, and HTTPS inspection.

Filter by
Sorted by
Tagged with
3 votes
2 answers
18k views

TMG 2010 does not proxy back to the same network as the request

I have an issue where websites that are hosted on a web server (www.example.com) are not accessible from their own network when accessed via its public IP address, but they are accessible from every ...
Mark Henderson's user avatar
2 votes
1 answer
6k views

Access FTPS from behind Forefront TMG

I have a web server on which IIS 7 host an SSL-enabled site. The client in am trying to connect with is behind the corporate Forefront TMG. The app is Total Commander - a file manager shell, that has ...
Maxim V. Pavlov's user avatar
0 votes
2 answers
382 views

Forefront TMG page denied display

Forefront TMG - URL categorization reason not displays although it should be for denied pages. I have tried all the available checkboxes on the Forefront rule regarding the message displayed with no ...
Tim Brigham's user avatar
  • 15.6k
1 vote
2 answers
2k views

Forefront 0xc0040017

I recently began to receive a huge (600 thousand to 2 million per day) number of FWX_E_TCP_NOT_SYN_PACKET_DROPPED, 0xc0040017 entries in my Forefront TMG logs. If the top 3 source IPs are any ...
Tim Brigham's user avatar
  • 15.6k
1 vote
1 answer
815 views

789 connecting Forefront VPN

I am receiving event 789 when connecting to my Forefront TMG VPN server from windows 7 clients via L2TP. This does not occur on XP systems. I've run through the debugging at http://blogs.technet.com/b/...
Tim Brigham's user avatar
  • 15.6k
2 votes
1 answer
164 views

Does TMG Reporting hate the month of July?

We have a ForeFront TMG 2010 SP1 installation. Reporting in the past has worked great. However, I now need to find out why we've ripped through half our monthly quota in the first 6 days of the ...
Mark Henderson's user avatar
1 vote
1 answer
2k views

How to install TMG 2010 for SBS 2011

I would like to install TMG 2010 for an SBS 2011 installation. I only have one physical server. I'd like to know if the SBS premium add-on windows 2008 R2 license can be installed on a virtual server ...
Bahrain Admin's user avatar
1 vote
2 answers
1k views

Should I Run TMG as a Hyper-V Guest

Okay here's an interesting question. In two parts: Is it advisable to run TMG as a hyper-v guest in production? (something is nagging me that it's not a good idea, but it's possible to give a VM ...
Michael Brown's user avatar
2 votes
1 answer
3k views

General Forefront TMG 2010 network / proxy configuration

We have decided to test and then deploy a Forefront TMG server on our network of 50 - 75 users (Windows 7, XP Clients, Windows Server 2008R2 Servers and a few Linux Boxes) Our Network Topology is : ...
Mutahir's user avatar
  • 2,357
2 votes
2 answers
228 views

How to configure a windows phone 7 to access website behind Forefront Threat Management Gateway

As in the title. We have a WCF service, and a Windows Phone 7 client. One of our customers wants to install the service behind a TMG server. I know that TMG is an update to the old ISA server and I ...
Preet Sangha's user avatar
  • 2,747
0 votes
1 answer
725 views

TMG slow when publish web farm

When I publish a single web server (HTTP, no authentication) it works fine, page response under a second. However publish a web farm (two web servers) the response time increases to 20-30 seconds ...
Simon Thompson's user avatar
2 votes
2 answers
3k views

TMG/ISA FWX_E_NETWORK_RULES_DENIED

I've got three disparit networks that all terminate at a TMG machine. I am trying to communicate between two of these networks, but the TMG firewall keeps dropping the connection as ...
Mark Henderson's user avatar
1 vote
0 answers
272 views

Can I map IP addresses to allow 2 site to site VPNs with same IP range using Microsoft TMG

I have a Microsoft TMG server with a number of site-2-site VPNs which all have different IP address ranges. Now a client has asked for another site-2-site VPN but their IP range clashes with an ...
Phil's user avatar
  • 3,198
1 vote
2 answers
10k views

Configuring TMG to allow a connection through the firewall

Here's the basic outline of the problem: I'm trying to ping from 192.168.0.2 to 192.168.10.2, but the ping dies on reaching 192.168.10.1. Obviously TMG is blocking it with the firewall. :) Assuming ...
user avatar
2 votes
3 answers
2k views

Are there other application layer firewalls like Microsoft TMG (ISA) that do advanced http rules?

Since the old days, ISA and now TMG have had several great features that I often want to deploy to my customers because of the enhanced functionality and security, but often the cost of an additinal ...
Bret Fisher's user avatar
  • 3,983
1 vote
1 answer
32k views

Forefront TMG Proxy blocking internal HTTP requests for FQDN

I have Forefront TMG installed as a proxy server. However, whenever I make HTTP requests to servers on the Internal network with a fully qualified DNS name, the proxy denies the connection. Denied ...
Pascal's user avatar
  • 133
2 votes
3 answers
4k views

Forefront TMG 2010: Can you monitor realtime TCP connections and bandwidth on a per-user basis?

I'm just starting a trial of ForeFront TMG to use as a proxy server. I know I can get a real time activity monitor and filter on a per user basis, but would like to be able to get a real time ...
user65235's user avatar
0 votes
1 answer
320 views

Forefront TMG - URL Overrides - how long does it take for them to come into play?

Adding a URL to a category seems seems to take an age, somewhere along the lines of 3 to 4 hours. Is this normal behaviour? Could someone tell me what is the default length of time that it takes ...
Richard's user avatar
1 vote
1 answer
1k views

Redundancy and Automated failover using Forefront TMG 2010 Standard between Production-DR site?

I'm using MS TMG 2010 Standard as my single firewall to publish my Exchange Server and IIS website to the internet, however it is just one VM in the DMZ network with just one network card (vNIC), what ...
Senior Systems Engineer's user avatar
3 votes
1 answer
4k views

Limiting bandwidth of workstations in MS Forefront TMG

We have configured Microsoft forefront TMG 2010 Enterprise as the cache server which provides internet access for all computers in our department. Is there any way to limit download speed per host/...
Isaac's user avatar
  • 581
0 votes
1 answer
669 views

Fail to start TMG server

Is there any conflict between Backup EXEC 2010 Remote agent and TMG Server (on 2008 R2)? Because when I install Backup EXEC 2010 Remote agent on TMG Server, server failed to start!!! and after ...
user avatar
1 vote
2 answers
6k views

How do I allow access to a service running on a Forefront TMG Server?

I'm setting up Zabbix for monitoring on our network. So far everything is going well, the agent is installed on all the servers. All the servers except the Forefront one are communicating with the ...
Richard C's user avatar
  • 331
1 vote
2 answers
2k views

VPN access configuration with ForeFront TMG

I am trying to configure VPN Client access with Microsoft ForeFront TMG 2010. When I try to add domain groups to allow access to them, under Group column I can only see the SID of the domain group. ...
user avatar

1
2