Introduction This post is about a recent scenario where TMG Administrator was receiving complains that some workstations that were using TMG as proxy were failing to run Windows Update. The interesting part of this issue was that only some workstations...

One of the most common questions we get is about TMG’s support for NIC Teaming and VLAN tagging with NLB enabled. We have recently released Software Update 2 for Forefront Threat Management Gateway (TMG) 2010 Service Pack 1 . This is a regular rollup...

NIS Signature set released last month (8.32) contained 4 signatures that were disabled by default: Plcy:Win/Sharepoint.SafeHTML1.XSS!2010-3243 Plcy:Win/Sharepoint.SafeHTML2.XSS!2010-3243 Plcy:Win/HTTP.SafeHTML1.XSS!2010-3324 Plcy:Win/HTTP.SafeHTML2.XSS...

Consider the following scenario: You have configured reporting with TMG, and you have published the generated reports content on an IIS 7.5 Server (Windows 2008 R2) so that TMG administrators in your organization can access these reports from their workstation...

Introduction Some of our customers have experienced the problem described below when doing the initial network configuration of a fresh TMG installation. I wanted to share here the cause and solution to this issue. Consider the following scenario You...

Introduction Consider a scenario where TMG Admin reinstalled TMG Enterprise Edition after a hardware failure and decided to rejoin the array member to the EMS. However, when TMG Admin tried to rejoin it the following error occurred: Troubleshooting The...

URL filtering is one of Forefront TMG’s most popular features. The feature makes use of a cloud service, also known as Microsoft Reputation Services (MRS) for URL categorization purposes. In this post we’d like to address some of the more frequent questions...

Scenario From time to time we come across cases where customers complain that the proxy exception list does not work for certain URLs and (Winhttp) clients still try to connect to the destination server using the proxy instead of going directly. Affected...

Introduction This post is about a scenario where TMG Administrator was trying to simulate a failover before put the environment in production. TMG nodes were installed in a third party virtual environment. TMG was using integrated NLB with Unicast, the...

Here are the ISA Server/Forefront TMG HTTP Policy settings I use for ECP, OAB and Autodiscover. These settings were tested with Outlook 2007/2010 and Exchange 2007. Setting and rule *Exchange ActiveSync *RPC over http...