Forefront TMG Product Team Blog
Further details and guidance regarding discontinuation of TMG Web Protection Services
As discussed in the following blog, the Forefront Threat Management Gateway (TMG) Web Protection...
Author: Forefront TMG Team Date: 12/15/2015
Important Reminder for Forefront Threat Management Gateway (TMG) Web Protection Services customers
Just a quick FYI in case you missed it. The information below was posted to the Microsoft...
Author: J.C. Hornbeck Date: 11/02/2015
Modernizing Microsoft Application Access with Web Application Proxy and Azure Active Directory Application Proxy
As the trends toward bring-your-own-device (BYOD) and Internet Protocol version 6 (IPv6) security...
Author: J.C. Hornbeck Date: 06/30/2015
KB: HTTPS inspection in Forefront Threat Management Gateway 2010 doesn't use the full URL path for URL categorization
When HTTPS inspection is enabled, Microsoft Forefront Threat Management Gateway 2010 (TMG 2010) uses...
Author: J.C. Hornbeck Date: 03/18/2015
Missing BDA hook rules – impact and potential root cause
Some of you may have already heard and know what NLB is and how it works as described in the general...
Author: Forefront TMG Team Date: 09/18/2014
How to create a CNG HTTPSi cert using a 2008r2 CA
In a previous article we explained how to create a self-signed CNG certificate, suitable for the...
Author: Forefront TMG Team Date: 08/29/2014
TMG SP2 Rollup 5 now available
We are happy to announce the availability of Rollup 5 for Forefront Threat Management Gateway (TMG)...
Author: Forefront TMG Team Date: 06/30/2014
TMG HTTPS inspection is failing if the target Web site is using a CNG certificate
If you have configured HTTPS Inspection on TMG you may not be able to access some sites such as...
Author: Forefront TMG Team Date: 05/28/2014
TMG Web Listener Certificate "Private Key handle error" 0x80090016
You may face an issue with a certificate assigned to a listener that suddenly becomes invalid and...
Author: Forefront TMG Team Date: 05/27/2014
The case of the big AD LDS database
recently we were working with customers, who did run into issues where the AD LDS database grew very...
Author: Forefront TMG Team Date: 12/10/2013
TMG SP2 Rollup 4 available
We are happy to announce the availability of Rollup 4 for Forefront Threat Management Gateway (TMG)...
Author: Forefront TMG Team Date: 11/08/2013
ISA 2006 / TMG 2010: DISABLE CLIENT-INITIATED SSL RENEGOTIATION, PROTECTING AGAINST DOS ATTACKS AND MALICIOUS DATA INJECTION
In these days we received a considerable number of support requests asking for more info about...
Author: Forefront TMG Team Date: 09/18/2013
TMG Service recovery actions
If the Firewall service crashes a number of times within a short time period it does not...
Author: Forefront TMG Team Date: 06/10/2013
Error 64 “ The specified network name is no longer available” while accessing a HTTPS site through ISA 2006
Here’s some info on an interesting support issue I worked the other day. If you happen to run...
Author: Forefront TMG Team Date: 05/29/2013
KB: A recurring monthly report job does not run when expected on an array in Forefront Threat Management Gateway 2010
Just wanted to let you know about a new KB article we published today. This one is a TMG article...
Author: J.C. Hornbeck Date: 04/16/2013
Forefront Unified Access Gateway 2010 Service Pack 3 Rollup 1 is available for download
We are happy to announce that Rollup 1 for Forefront UAG 2010 Service Pack 3 has been released. UAG...
Author: J.C. Hornbeck Date: 04/15/2013
TMG stopped processing web proxy requests
This post is about an issue I worked on several days ago. Symptom: ======== My customer had a TMG...
Author: Forefront TMG Team Date: 04/09/2013
How to configure the TMG Service Account to avoid problem with logging on SQL Server
One of the features introduced with TMG Service Pack 2 is to run the Firewall Service with a Domain...
Author: Forefront TMG Team Date: 04/02/2013
Clients Are Not Prompted to Choose a Certificate When Authenticating to ISA/TMG
Recently I have been seeing an increasing number of cases with the same symptom especially in...
Author: Forefront TMG Team Date: 03/06/2013
Access to remote FTP server through TMG 2010 may fail with error 550 (Access Denied)
Hi everybody! In this article we will see how to troubleshoot an issue with accessing an FTP server...
Author: Forefront TMG Team Date: 03/05/2013
You can remotely manage the Enterprise Policy, but not the Array Policy
I’ll try to elaborate on the issue using as many illustrations and snapshots as possible....
Author: Forefront TMG Team Date: 02/08/2013
TMG SP2 Rollup 3 available
We are happy to announce the availability of Rollup 3 for Forefront Threat Management Gateway (TMG)...
Author: Forefront TMG Team Date: 01/17/2013
TMG services hang at startup due to third party service
This post is, once again, about an issue I worked on few days back. Before I start...
Author: Forefront TMG Team Date: 01/02/2013
TMG sources outgoing packets with Secondary IP addresses
Hello Everyone! We’ve seen a few cases lately dealing with TMG servers sourcing outgoing...
Author: Forefront TMG Team Date: 12/31/2012
How to delegate credentials sending only the username to an internal webserver using TMG 2010
Sergio Medina here, and today I want to talk about a question we receive every now and then and...
Author: J.C. Hornbeck Date: 12/12/2012
How to implement PEAP-MSCHAPv2 as authentication method for VPN connections in TMG 2010
As you may know, there is a known security vulnerability for the authentication method MS-CHAPv2....
Author: Forefront TMG Team Date: 12/10/2012
How to determine if a client request contains a Multi-Line Header
This post is about an issue that I came across, while working on a case recently. SCENARIO:...
Author: Forefront TMG Team Date: 11/13/2012
Setting up TMG 2010 Where EMS is a Domain Member and Array Servers are in a Workgroup
Introduction I have seen a number of cases where customers were installing TMG 2010 in a...
Author: Forefront TMG Team Date: 11/01/2012
Using the Account Lockout Feature in TMG 2010
Introduction A much needed feature was added in Service Pack 2 for Forefront TMG 2010. This great...
Author: Forefront TMG Team Date: 11/01/2012
TMG 2010 – Error “setup failed while registering Forefront TMG managed performance monitor” prompted while installing or repairing the TMG installation
It can happen while installing Forefront TMG 2010 or during a repair that we hit the following...
Author: Forefront TMG Team Date: 10/05/2012
TMG Logging to LLQ
One of the problems causing TMG to log to LLQ instead of the database is the presence of orphaned...
Author: Forefront TMG Team Date: 09/18/2012
Important Information Regarding Changes to Forefront Product Roadmaps
Today, as a result of our effort to better align security and protection solutions with the...
Author: Forefront TMG Team Date: 09/12/2012
Sent Items delayed when publishing Outlook Anywhere through TMG
Problem When publishing Exchange 2010 “Outlook Anywhere” via TMG 2010, you may find that some...
Author: Forefront TMG Team Date: 08/27/2012
An enterprise node is incorrectly added in the Forefront TMG 2010 MMC after you run repair on Forefront TMG 2010 SP1 Update 1
Microsoft’s own Junaid Jan (Security Support Escalation Engineer - Forefront Edge Team) recently...
Author: Forefront TMG Team Date: 08/22/2012
FIX: The Forefront Threat Management Gateway Firewall service (Wspsrv.exe) may crash frequently for a published website secured by SSL after you install Service Pack 2
Here’s a new Knowledge Base article we published recently. This one talks about a fix for an issue...
Author: Forefront TMG Team Date: 08/21/2012
Troubleshooting why ISA server does not cache the response of a web server
Consider a scenario where an ISA administrator wants to cache a particular website but he is not...
Author: Forefront TMG Team Date: 08/21/2012
Troubleshooting "The operation failed 0x80000400 " while joining TMG server to an EMS Array
I was looking through our TechNet Wiki this morning and came across a great article that written by...
Author: Forefront TMG Team Date: 08/20/2012
Getting error 12202 intermittently (Authentication Failure) while accessing published resources (SharePoint/Exchange) through TMG 2010
I was working on a case where we were seeing an intermittent failure with authentication for...
Author: Forefront TMG Team Date: 08/15/2012
Support Tip: Site to site IPSEC tunnel Between TMG 2010 on VMware and Cisco
Having trouble configuring a VPN tunnel between Microsoft Forefront Threat Management Gateway 2010...
Author: Forefront TMG Team Date: 08/15/2012
TMG services will not start and Event ID 21235 is logged
Here’s some info on an interesting support issue I worked the other day. If you happen to run...
Author: Forefront TMG Team Date: 08/14/2012
Support Tip: Adding an ISA Server 2004/2006 Replica Configuration Storage Server fails with Error Code 0x80072108
Have you ever run into an issue where adding Replica Configuration Storage server an array was...
Author: Forefront TMG Team Date: 08/13/2012
Support Tip: Troubleshooting WPAD and TMG/ISA
So you have WPAD configured on your network and everything looks good, but TMG 2010 or ISA 2006...
Author: Forefront TMG Team Date: 08/08/2012
Support Tip: Solving the mystery of frequent occurrences of ISA Event ID 14197
Have you ever had an issue where frequently during certain periods of the day, you start seeing the...
Author: Forefront TMG Team Date: 08/08/2012
TMG Services Stopping Unexpectedly
As of early AM June 28th 2012, there have been many reports of TMG services stopping...
Author: Forefront TMG Team Date: 06/29/2012
Newly added Network adapter not showing up in RRAS with Forefront TMG
Recently I came across a situation where one of our customers using Forefront TMG could not...
Author: Forefront TMG Team Date: 06/27/2012
Authentication failure while trying to access a website through TMG as forward proxy
This post is about an issue I came across while working on a case and thought of sharing with...
Author: Forefront TMG Team Date: 05/25/2012
Moving from Eval to RTM: The steps you need to take in any TMG environment.
Hello All! It’s Brett Crane from the Forefront Edge team here at Microsoft. I’ve noticed...
Author: Forefront TMG Team Date: 05/11/2012
Authentication Issues while Using LDAPS authentication on ISA (Internet Security and Acceleration Server) 2006
Introduction: It is a very common scenario where we use LDAP authentication for publishing...
Author: Forefront TMG Team Date: 05/08/2012
TMG SP2 Rollup 2 available
We'd like to advise that Rollup 2 for TMG SP2 is now available. TMG SP2 Rollup 2 can be downloaded...
Author: Forefront TMG Team Date: 05/08/2012
TMG 2010 – FBA, troubleshooting the change password feature
When we are publishing OWA, or every web service through TMG and we are willing to make use of FBA...
Author: Forefront TMG Team Date: 05/07/2012