Foreword - Added 2011-03-08
As far as I'm aware, nothing significant has changed since the blog linked here - ISA Server is now TMG, sure, but XBox Live and TMG don't officially support one another. This blog post captures something that seems to work for me, but may not work for you. (If you find a better or more reliable way, I'm all ears).
Again - easiest way to ensure XBox happiness is with a compatible non-Strict-NAT router. I don't have one of them; all I have is an enterprise-security-and-firewalling product as my SOHO router, so I made enterprise-security-and-firewall-ade with it.
Xboooox (If you just want the "how to set it up" bit without the commentary, skip to the next heading).
Continuing in the tradition of trying to get my game on through ISA Server , I decided to try out the Halo Reach beta tonight, and was promptly stumped when I couldn’t access my Account History (I didn’t need to, as it turns out, but I couldn’t, so it was a challenge , so I wasn’t about to let my girlfiend (not a misspelling) watch TV until I’d fixed it).
The Xbox generally worked fine for games, but frequently in the Marketplace, bad stuff would happen (i.e. an error saying something about not being able to access the marketplace now, but sometimes a retry would work, extremely weirdly).
The logs showed that TMG was intercepting the traffic, running it through the Web Proxy Filter, and noticing that it wasn’t (how to put it nicely) valid , so dumping it, with an error message indicating 13 – The Data Is Invalid. (cue indignant hmph )
With the help of Jim Harrison and Bala Natarajan, I ran through some reconfiguration steps; here’s what I ended up with that works:
How I set it up Toolbox Objects:
Rules (in this order)
Other Settings I’d twiddled but may or may not be relevant:
There. That’s my word count for the month. Ooh, a non-code-locked Blur demo too! I’ve left my console unloved for too long.