Using the Check Out Feature with WSS Behind TMG

[Today’s post comes to us courtesy of Mark Stanfill]

When trying to use the Check Out (or Check In) feature of Windows SharePoint Services (WSS) 3.0 published behind TMG in a default EBS installation, checkout fails with the error below:


Error Code: 500 Internal Server Error.  The request was rejected by the HTTP filter.  Contact the server administrator.  (12217)

Error Code: 500 Internal Server Error.  The request was rejected by the HTTP filter.  Contact the server administrator.  (12217)



To allow documents to be checked in and checked out through WSS 3.0 behind TMG, you must disable normalization in order to allow the URL that WSS specifies.  To do this, use the following steps:

  1. Log on to the Management Server or Security Server as an administrator and launch Forefront TMG Management console.
  2. Select Firewall Policy in the console and select the Allow Authenticated Users to access Sharepoint services rule.
  3. Right-click on the rule and choose Configure HTTP.image
  4. Uncheck Verify normalization.
  5. Click OK to save changes.
  6. On the left pane, click on Monitoring and click on the Configuration tab. Refresh the screen until you see that the status is Synced.image
  7. Log out of RWW and log back in to check the document out.

Comments (2)

  1. s.sullivan1 says:


    We probably won’t do an-EBS specific coverage of this topic, but the existing ISA/TMG docs cover this scenario (and all of its intracacies pretty thoroughly).  For example:

    Hope this helps,


  2. Paul Scholda says:

    Is there any chance to get a white paper discussing the publishing of a standard (internal) webpage or the publishing of an Office Sharepoint Server? This would really help me a lot!



Skip to main content