website statistics
Browse by Tags - Yuri Diogenes's Blog - Site Home - TechNet Blogs

Yuri Diogenes's Blog

Thoughts from a Senior Content Developer @ Microsoft Data Center, Devices & Enterprise Client – CSI (Enterprise Mobility Team)

Browse by Tags

Related Posts
  • Blog Post: Securing your DNS using TMG 2010

    1. Introduction Nowadays information is much easier to find than it was in the past, you can find information about pretty much everything by just searching on the web (try http://www.letmebingthatforyou.com/?q=dns%20atacck for example). For this reason it is even more important to be diligent while...
  • Blog Post: Presentation Highlights

    FGF TV just released this video that covers some highlights of the TMG presentation that I delivered in Brazil last month:
  • Blog Post: As you know, TMG is over….now what?

    The news about the retirement of Forefront TMG 2010 was announced last September on this blog post . Since them I didn’t have I chance to write about it as I was engaged on so many other projects, however (and not intentionally) on that same day that this was announced, I was with Jim Harrison and Tom...
  • Blog Post: TMG E-Mail Protection Feature x Exchange 2010 SP1

    Whatta busy week here with this problem. As you might be aware, Exchange 2010 SP1 breaks the integration that TMG has with Exchange Edge when using E-Mail Protection feature, the issue causes the TMG Managed Control Service to fail to start. This issue is documented on our team blog http://blogs.technet...
  • Blog Post: TMG Slides [Portuguese]

    Here it is another set of slides, now about TMG from a presentation that I delivered last year in Brazil.   Once again, enjoy it.
  • Blog Post: Common Questions and Answers about ISA Server 2006 and Windows Server 2008

    With Windows Server 2008 bring so many cool features such as SSL VPN, many customers are asking some questions about this integration. Here are some common questions and answers about this: 1) Can I install ISA Server 2006 in a Windows Server 2008? No. TMG will be the first Microsoft Firewall...
  • Blog Post: Forefront Contest Round One – TMG Questions

    Hi folks, we will start the contest today with five Forefront TMG questions. As I mentioned in the previous post , you will need to send me the answers via Twitter using Direct Message feature. In additional to that it is also important to clarify the following points: I must receive your answers...
  • Blog Post: TMG and UAG supportability boundaries

    I remember in the past (IAG and ISA) many people asking what it was and what it was not supported doing on ISA that comes with IAG. As TMG and UAG approaches to release date we do have now an official supportability statement about using TMG that comes with UAG installation. So, before exercise your...
  • Blog Post: Unable to Add an Additional IP on Receive Connector on Exchange Edge when using E-Mail Protection feature on Forefront TMG 2010

    1. Introduction Consider a scenario where Firewall Administrator configure E-Mail Protection feature on Forefront TMG 2010 and enable EdgeSync traffic as shown below: The environment was working fine but later the Firewall administrator wants to add an additional IP on the Receive Connector (in the Forefront...
  • Blog Post: High Processor Utilization by wspsrv.exe process on TMG 2010

    1. Introduction   Troubleshooting high CPU utilization can be challenging, even when you know the process that is causing such behavior, which in this case is the wspsrv.exe.   In order to better understand what’s going on in scenarios like this is recommended to get perfmon snapshot, including...
  • Blog Post: Unable to block access for a web site using URL Filtering Override option on TMG 2010

    1. Introduction The new URL Filtering option on Forefront TMG 2010 allows you to manually add web sites to a specific category; such feature is called URL Category Override . This can be a good approach when you want to force a specific site to be categorized in such way that it fits into a category...
  • Blog Post: Just a reminder….

    Inscrições: https://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032453033&Culture=pt-BR
  • Blog Post: TMG – The First 64-bit Microsoft Firewall

    Yesterday I was talking with Richard Hicks and he was telling me how excited he was with the new set of features that TMG has. This is indeed true, many people got really excited with the package of new features that TMG Beta 2 brought, but there is something that you might not realize it yet. TMG is...
  • Blog Post: Using DebugDiag 1.2 to Automate Dump Analysis – TMG High CPU Utilization Scenario

    Introduction The goal of this post is to show how DebugDiag 1.2 can assist you identifying a potential source of bottleneck on a scenario where TMG user mode process (wspsrv.exe) is consuming high amount of CPU. Data Gathering First part is to make sure you collect the user mode dump while the issue...
  • Blog Post: TMG – Making Firewall Management an Easier Task

    1. Introduction I was Proxy 2 administrator back in 1997 in a technology school, in 2000 I took my Proxy 2.0 exam and when ISA 2000 was released I was really like: WOW, that’s a huge change. It was indeed a great moving from a simple Proxy to a more robust Proxy with Firewall capabilities. But when...
  • Blog Post: The Curious Case of TMG Stopping Responding in Random days but always during the Morning

    1. Introduction Talking about curious case to troubleshoot, this was a very good one. First because this was a new deployment, a well planned hardware for the deployment and the amount of traffic hitting TMG was not that huge. Everything seems to be okay, other than the fact that at least twice...
  • Blog Post: Understanding, Configuring and Troubleshooting E-Mail Protection Feature on TMG 2010

    E-Mail Protection feature in TMG was a feature that I used to work a lot when I was in CSS. This year I delivered a session internally about Troubleshooting E-Mail Protection in TMG and today I’m sharing the slide deck (the public version) with you. Feel free to download it: Note: most of the troubleshooting...
  • Blog Post: TMG on EBS, what to expect?

    Do you want to know how TMG plays in the EBS solution? If you do, than next week is your chance to get a full clarification from Amy Babinchak and Tom Shinder in a live presentation. For more information check out Tom’s blog: http://blogs.isaserver.org/shinder/2008/12/09/amy-babinchak-and-tom-shinder...
  • Blog Post: Site to site connectivity with Windows Azure (GA)

    Almost a month ago I wrote this post about an attempt to establish a site to site connection between TMG and Windows Azure and the conclusion was: you need a valid IP on your edge device in order to do that. Done, got my valid IP and now I’m ready to rock! It should be straight forward now that...
  • Blog Post: More on Troubleshooting SSTP

    A buddy of mine (Daniel Mauser) from PFE (Premier Field Engineer) read my previous post about SSTP and sent me a note about his thoughts on the PKI side of the house (since is his specialty). The notes about the troubleshooting and planning phase from my previous post are: · For troubleshooting purpose...
  • Blog Post: Forefront TMG Malware Inspection False Positive Detection

    Recently I saw this thread on the TMG Forum and found it very interesting as it was quiet easy to repro. Yesterday Microsoft released a signature update that address this issue. The problem that TMG’s administrators were facing is documented here: From: http://www.microsoft.com/security/portal/Threat...
  • Blog Post: Description of Microsoft Forefront Threat Management Gateway definition updates

    We just released a new KB where we explain more details about Malware Inspection and NIS files. Check it out at http://support.microsoft.com/kb/2160835 .
  • Blog Post: Hey DC, are you still there?

    1. Introduction   Yesterday I wrote about the “perfect storm” case where the root cause was disk bottleneck, today I would like to discuss a troubleshooting scenario for one of the 5 core scenarios that was presented yesterday , which is called “authentication”. Again, the symptom was exactly the...
  • Blog Post: Unable to join a new Node on an existing TMG 2010 Array

    First of all, happy new year!! It took me a long time to come back here due many other projects going on…I’m actually feeling like I still in December as I didn’t really have time off during the holidays. Very different from Brazil (where I’m originally from), there things are slow during the holidays...
  • Blog Post: Incorrect Key Type when Creating a Web Lister on TMG using V3 Certificate

    Today I was assisting a friend of mine here from TMG team that was facing this issue, same issue that was also mentioned on this thread . The problem was happening when using Cryptography Next Generation (CNG) or also called V3, TMG was not recognizing the private key and was showing up this error message...