Forefront TMG 2010 documentation now available on TechNet

Forefront TMG 2010 TechNet documentation is now live with Forefront TMG Release to Web content. This release of the documentation culminates a customer- and solutions-focused effort undertaken by the Forefront TMG User Assistance team since the release of ISA Server 2006, resulting in a new content structure, new content, and the streamlining of previously-available content….


Using Forefront TMG/ISA Server BPA for documenting your deployment

Introduction An administrator of Forefront TMG or ISA Server may want to document their current configuration, so that they can: Recreate the Forefront TMG/ISA Server setup from the documentation in the case of data loss/corruption. Share the documentation with other people, so that they can understand what settings are used (e.g. in the case of…


RRAS Service fails to start on ISA Server 2006 when enabling RADIUS Authentication for VPN Users

Introduction   Consider a scenario where the ISA Server administrator has dial-in VPN correctly configured and working through ISA Server 2006. Now he needs to use RADIUS as the credentials authority and he makes the appropriate changes to the RADIUS configuration on the VPN settings as shown in Figures 1, 2 and 3:    …


How to get NLB to work with Forefront TMG when running in Hyper-V.

If you are running your Forefront TMG servers as Windows 2008 Hyper-V guests and you have enabled NLB in Forefront TMG, you may have noticed that the NLB cluster nodes fail to converge. There is a known issue with Unicast NLB and Hyper-V that affects ISA 2006 and Forefront TMG deployments. Note: This blog post…


Troubleshooting NIS was never made easier

In the blog post from last week, we announced the availability of the whitepaper for configuring, monitoring and troubleshooting NIS in Forefront TMG 2010. NIS helps protect users against network based attacks. This whitepaper includes both technical background as well as step-by-step guidance. In this blog post we would like to focus on the troubleshooting…


Closing the Forefront codename Stirling – Forefront TMG forum

In order to consolidate all posts about Forefront TMG to the Forefront Edge Security forums, the Forefront Threat Management Gateway forum (http://social.technet.microsoft.com/Forums/en-US/FTMGNext/threads), currently located within the Forefront codename Stirling group of forums, will be locked at the end of December. For continued information about Forefront TMG, go to the Forefront Edge Security forums: http://social.technet.microsoft.com/Forums/en-US/category/forefrontedgesecurity. The…


Manually creating the SecurID Node Secret fails on Forefront TMG.

Problem You are attempting to configure SecurID authentication on the TMG server. In order for the TMG server to successfully authenticate with the RSA Authentication Manager, a Node Secret must be established between the RSA Authentication Manager and the TMG server. One method that can be used to create the Node Secret is to use…


Hyper-V Update to Improve Network Stability

If you’ve deployed your ISA Server, Microsoft IAG, Forefront TMG or Forefront UAG on Hyper-V R2 and noticed that a connection between the guest and the virtual switch starts “acting odd”, perfoms poorly or becomes disconnected entirely, you  may want to apply this update: http://support.microsoft.com/kb/974909 Thanx to the Hyper-V team for this update!  Jim Harrison,…


Reducing Kerberos requests when using KCD for web publishing.

1. Introduction If you have read the article “Kerberos Constrained Delegation in ISA Server 2006” http://technet.microsoft.com/en-us/library/bb794858.aspx and followed the instructions how to publish a web server by using Kerberos Constrained Delegation, you might expect that the Kerberos authentication requests should be quite low as Kerberos uses tickets. You might also expect that those tickets will…


Forefront TMG 2010 Tools and SDK Update

Greetings TMG Administrators, This month Microsoft released the new Forefront TMG 2010 Tools and Software Development Kit with some new updates since the last packages (TMG Beta 3 and TMG MBE). In this package there are two tools that we want to bring to your attention: Security Configuration Wizard (SCW) Update for Forefront TMG Standard…