There is a XMas package for you that use TMG 2010…hey and for you that use ISA Server 2006 too

Today we are making publicly available the Software Update 1 Rollup 2 for Forefront Threat Management Gateway (TMG) 2010 Service Pack 1. This hotfix include resolution for the following issues:   article Title 2452980 (http://support.microsoft.com/kb/2452980) Upload speed through Forefront TMG 2010 is very slow on a high speed Internet connection 2478286 (http://support.microsoft.com/kb/2478286) Connection does not…


Eternal Loop while Accessing a site Published by TMG 2010

Consider the following scenario: You have a computer that is running Forefront TMG 2010. You have a Web server that automatically redirects HTTP requests to Secure Socket Layer (SSL) requests. You configure the Web listener to listen for HTTP requests and also to use bridging. You configure the Web listener and the bridging for both…


Unable to Access a Published Apache Server behind ISA Server using SSL

Consider a scenario where you are publishing a third party web server, in this case an Apache Server that uses HTTPS through ISA Server 2006. Randomly the site doesn’t work, clients are unable to access it and when this happens the publishing rule test button shows the result below (error 0x80090326): Notice that this error…


Hey DC, are you still there?

1. Introduction   Yesterday I wrote about the “perfect storm” case where the root cause was disk bottleneck, today I would like to discuss a troubleshooting scenario for one of the 5 core scenarios that was presented yesterday, which is called “authentication”. Again, the symptom was exactly the same: ISA Server stops responding requests in…


We are all waiting for you Mr. Disk….are you there?

1. Introduction   As more I deal with Performance issue on ISA Server (or TMG), more I realize that there are not really a lot of new things on this area to be explored. The reason why I say that there are not much of new things on this area is because I can easily…


Security baselines for Windows Server® 2008 R2 and Microsoft Office 2010 – setting packs for Windows® 7 and Windows® Internet Explorer® 8

The Microsoft Solution Accelerators team is pleased to announce the release of new resources that you can use in combination with the Microsoft Security Compliance Manager tool: the Windows Server 2008 R2 Security Baseline and the Office 2010 Security Baseline, and setting packs for Windows 7 and Internet Explorer 8. Together with the tool, these…


TMG 2010 Overview for ISA Admins

Last week I delivered a level 200 presentation for a customer about TMG, a brief overview of TMG in a Secure Web Gateway Scenario and some demos (which are not available here, but I’m working on the videos to share it here). The goal of this presentation is to introduce TMG for ISA administrators of…


Unable to Access Resource behind TMG after enabling NLB

Consider a scenario where the TMG administrator is publishing servers that are behind TMG and after enabling NLB on the External interface the users are not able to access those resources. If he uses the DIP (Dedicated IP) to publish the resource it works. The basic diagram is showed in the figure below: The traffic…