Forefront TMG Update 1 Rollup 3 is now Available

The Update 1 Rollup 3 for Microsoft TMG 2010 is now available for you. This rollup address the following issues:

KB article



FIX: "A security package specific error occurred" error when you run a recurring report on a Forefront TMG 2010 server that is managed by an EMS and that is in a workgroup


FIX: "0xc0360007 (STATUS_IPSEC_CLEAR_TEXT_DROP)" error when you try to access the internal IP address of a Forefront TMG 2010 server through an IPsec site-to-site network


"HTTP/1.1 502 – Error 11 Bad format" error when you access SSL websites that use SAN certificates in Forefront TMG Server 2010 if a non-English version of a Windows operating system is installed


FIX: "Page Cannot Be Displayed" error when you try to access a website that requires a client certificate authentication on a Forefront TMG client in Forefront TMG 2010 if HTTPS Inspection is enabled


FIX: "502 Proxy Error. An attempt was made to load a program with an incorrect format. (11)" error when you try to use a HTTPS URL through Forefront TMG 2010 if HTTPS inspection is enabled


How to configure the "HTTPS inspection caching in a forward proxy scenario" and "HTTPS inspection inclusion list" features in Forefront TMG 2010


An enterprise node is incorrectly added in Forefront TMG MMC after you install Forefront TMG 2010 SP1 Update 1


"Sign in as a Different User" does not work on a SharePoint website that is published by Forefront TMG 2010


PPTP or L2TP/IPsec connection is not reestablished between Forefront TMG 2010 servers


FIX: "502 Proxy Error. An unknown error occurred while processing the certificate. (-2146893017)" error when you try to access a website over HTTPS in Forefront TMG 2010 if HTTPS inspection is enabled


Forefront TMG Firewall service may stop when users run desktop sharing software over HTTPS that is proxied by Forefront TMG 2010


"0xc0040446" or "0xc004041d" error if the primary IP address or DNS address uses,, or in Forefront TMG 2010


SCOM logs many "Forefront TMG Server – Cache: Current Cache Fetches Average Ms Per Request error" error alerts from TMG Management Pack through Forefront TMG 2010


Mspadmin.exe may crash if you do not use SQL Server Express to log traffic in Forefront TMG 2010


Forefront TMG Firewall service might crash when WP_TRAFFIC tracing is enabled in Forefront TMG 2010


"0xc004039E" error when you use the "Allow user override" setting for a HTTP deny rule in an enterprise policy in Forefront TMG 2010


FIX: Forefront TMG Job Scheduler service (Isasched) stops responding on an array member server that is not a report server in Forefront TMG 2010

As you can see there are a lot of fixes in this rollup, I particularly worked in many issues involving 2501650 and 2502686 while the hotfixes were not even ready. Due the nature of those issues I strong recommend you to download this update and plan the installation on your Forefront TMG. To install this update, you must have TMG 2010 SP1 and Update 1 already installed.

Got get it at

Comments (4)

  1. There is no such thing as Software Update 2 anymore. The name changed for Software Update 1 Rollup 1, 2 and now 3.

  2. Hello TMG User,

    No you don't. The only pre-req is to have Forefront TMG 2010 SP1 Update 1.

  3. KB says:

    If we have software update 2 installed, we can install this as well (it isn't explicitly stated above)?

  4. TMG User says:

    Do we have to install Rollup 1 and 2 before installing this rollup ?