04 janvier 2011

New rollups released for TMG 2010 and ISA 2006

We would like to inform you that we have released two new rollups. Forefront Threat Management Gateway (TMG) 2010 Service Pack 1 We have released Software Update 1 Rollup 2. More information about the rollup is available in the following KB article- http://support.microsoft.com/kb/2475183 ISA Server 2006 SP1 Hotfix Package We have released a Hotfix a Hotfix Package for ISA Server 2006 SP1. More information is available in the following KB article - http://support.microsoft.com/kb/2475184 Availability ... [Lire la suite]
Posté par jcdemarque à 14:32 - - Permalien [#]
Tags : , , , , , , , , ,

21 novembre 2010

Case sensitivity of ISA/TMG generated proxy auto configuration (pac) files

Scenario From time to time we come across cases where customers complain that the proxy exception list does not work for certain URLs and (Winhttp) clients still try to connect to the destination server using the proxy instead of going directly. Affected applications vary, we have seen issues with outlook 2007, SCCM, but the list might not be limited to those two – any Winhttp application might show the same symptoms. Upon investigating these issues we found that the problem is a case-sensitivity issue – applications might... [Lire la suite]
Posté par jcdemarque à 19:17 - - Permalien [#]
Tags : , , , , , ,
05 novembre 2010

Unable to Fail Over from one TMG node to another when using NLB in a Virtual Environment

Introduction This post is about a scenario where TMG Administrator was trying to simulate a failover before put the environment in production. TMG nodes were installed in a third party virtual environment. TMG was using integrated NLB with Unicast, the External TMG adapter was connected to a layer 2 switch. To attempt to simulate failover, TMG Admin was disabling the NICs of one of the nodes, the unexpected result was that the other node suddenly stopped accept connections from External users. Troubleshooting When dealing... [Lire la suite]
Posté par jcdemarque à 19:01 - - Permalien [#]
Tags : , , , , , , , , , ,
02 novembre 2010

Outlook Anywhere and ActiveSync Http Filter Configuration

Here are the ISA Server/Forefront TMG HTTP Policy settings I use for ECP, OAB and Autodiscover. These settings were tested with Outlook 2007/2010 and Exchange 2007. Setting and rule *Exchange ActiveSync *RPC over http (Outlook 2003/2007) General tab Maximum headers length 32768 32768 Maximum payload length 10485760 (10 MB) Any Maximum URL length 1024 16384 Maximum query length 512 4096 Verify normalization Yes Yes Block high bit characters Yes Yes ... [Lire la suite]
Posté par jcdemarque à 11:43 - - Permalien [#]
Tags : , , , , , , , ,
16 octobre 2010

TMG is Unable to Listen on Port 80 (no IIS was not installed)

Introduction Consider the scenario where a TMG 2010 Server is installed as Hyper-V guest on a Windows 2008 Server. You publish a website on port 80 or enable HTTP to HTTPS redirection on a Web Listener for an existing SSL publishing rule. When you try to access the published website you get an error: 10060 Connection Refused. Troubleshooting A quick look at the TMG Live Logging reveals the following: Netstat output indicates that Process ID 4 (System) is listening on port TCP 80 as shown below: This explains why... [Lire la suite]
Posté par jcdemarque à 11:33 - - Permalien [#]
Tags : , , , , , ,
15 octobre 2010

How to determine which version of TMG 2010 is installed

Last week Tarek Majdalani, a Microsoft Most Valuable Professional, posted an article about identifying which version of TMG 2010 is installed – RTM, Service Pack 1 or Update 1 to Service Pack 1. The article is available on the TechNet Wiki site here. If you are wondering what version you have installed on your server, this article has all the information you need. TMG 2010 Level →   TMG 2010 RTM TMG 2010 with SP1 TMG 2010 With SP1 & SU1 Version From  ↓ Help Menu   7.0.7734.100 ... [Lire la suite]
Posté par jcdemarque à 16:42 - - Permalien [#]
Tags : , , , , ,

15 octobre 2010

New Forefront TMG Books

Exciting times in the world of Forefront TMG literature! In English: Deploying Microsoft Forefront Threat Management Gateway by Yuri Diogenes and Dr. Tom Shinder, which can be preordered here. In German: Microsoft Forefront Threat Management Gateway – Das Handbuch von Marc Grote, Christian Gröbner, und Dieter Rauscher, which can be ordered here. In Hungarian: A kapun túl by Gál Tamás, which is available as a free download. Enjoy! Nathan Bigman, Content Publishing Manager ... [Lire la suite]
Posté par jcdemarque à 16:41 - - Permalien [#]
Tags : , , , , , , ,
15 octobre 2010

Software Update 1 for Microsoft Forefront Threat Management Gateway (TMG) 2010 Service Pack 1 now available for download

We are happy to announce the availability of Software Update 1 for Microsoft Forefront TMG SP1. This update contains the following enhancements: • SafeSearch Enforcement. Forefront TMG can enforce blocking adult text, images and videos from search results by popular search engines. SafeSearch can be enforced on specific groups or to the entire organization. • Including non-primary URL filtering categorizations. Forefront TMG uses an algorithm (described in this post) to select a URL’s “primary” category from among up to... [Lire la suite]
Posté par jcdemarque à 16:40 - - Permalien [#]
Tags : , , , , , ,
09 septembre 2010

Easy Migration of WebSense Settings in Forefront TMG 2010

Customers who have an existing Websense® installation and want to move to Forefront Threat Management Gateway (TMG) as a Secure Web Gateway can migrate without creating rules from scratch.  SecureGUARD (http://www.secureguard.at/Shop/ ) provides the Web Configuration Migration Wizard, a migration tool that converts an existing Websense configuration to a Forefront TMG 2010 installation, with reduced setup time and optimized security. The wizard enables you to export an existing WebSense configuration and import the... [Lire la suite]
Posté par jcdemarque à 21:51 - - Permalien [#]
Tags : , , , , ,
26 février 2010

TMG 2010, Exchange Edge 2010 & Forefront Protection For Exchange 2010 – All In The Same Box…

Microsoft had released the latest version of ISA server couple of months ago and it has undergone a name change. The new release is named Forefront Threat Management Gateway (TMG) 2010. This version supports running Exchange Edge 2010 and Forefront Protection For Exchange 2010 along with it in the same box. I bet you know where I am heading! You don’t need different servers like in the old times. You can have a couple of servers in the DMZ with all three components. The same box will publish Exchange services like OWA, OA &... [Lire la suite]
Posté par jcdemarque à 17:27 - - Permalien [#]
Tags : , , , , , , ,