+ Post New Thread
Results 1 to 2 of 2
Internet Related/Filtering/Firewall Thread, All http requests via TMG 2010 returning error for a 2008 terminal server in Technical; I have an odd problem with a new Windows 2008 terminal server I have set up. Every request it passes ...
  1. #1

    localzuk's Avatar
    Join Date
    Dec 2006
    Location
    Minehead
    Posts
    17,632
    Thank Post
    514
    Thanked 2,442 Times in 1,890 Posts
    Blog Entries
    24
    Rep Power
    831

    All http requests via TMG 2010 returning error for a 2008 terminal server

    I have an odd problem with a new Windows 2008 terminal server I have set up.

    Every request it passes to our TMG 2010 proxy results in an error on the TMG box (details of this error at the end).

    The terminal server in question is set up as a VM on XenServer and is replacing a 2003 server that was there before (ie. the virtual drive has been formatted and 2008 installed).

    Anyone got any ideas why this is? I can access internal intranet sites, so those web servers are obviously receiving correctly formed packets, and I can RDP into the machine, etc...

    It seems to think that the packets are malformed - ie. they don't pass TCP checksum tests on the TMG box.

    Quote Originally Posted by TMG
    Client Agent Authenticated Client Service Referring Server Destination Host Name Transport HTTP Method Filter Information MIME Type Object Source Cache Information Error Information Source Port Session Type Bidirectional Network Interface Raw IP Header Raw Payload Processing Time Bytes Sent Bytes Received Original Client IP GMT Log Time Authentication Server UAG Array Id UAG Version UAG Module Id UAG Id UAG Severity UAG Type UAG Event Name UAG Session Id UAG Trunk Name UAG Service Name UAG Error Code Internal Service Info Log Field Client Application SHA1 Hash Client Application Trust State Client Application Internal Name Client Application Product Name Client Application Product Version Client Application File Version Client Application Original File Name Client FQDN URL Categorization Reason Forefront TMG Client Version URL Destination Host Name Log Time Client IP Destination IP Destination Port Protocol Action Overridden Rule NIS Scan Result NIS Signature NIS Application Protocol Rule Result Code HTTP Status Code Client Username Source Network Destination Network URL Server Name URL Category Log Record Type Malware Inspection Action Malware Inspection Result Threat Name Threat Level Content Delivery Method Malware Inspection Duration (msec) NAT Address Client Application Path
    - TCP - - - 0x0 0x0 49269 0 0 0 10.5.143.192 04/11/2010 16:43:01 - - 0 - 0 - - - - - - 0 1048575 - 04/11/2010 16:43:01 10.5.143.192 10.5.143.240 8080 HTTP Proxy Denied Connection - None - see Result Code 0xc0040031 FWX_E_BAD_TCP_CHECKSUM_DROPPED Internal Local Host - SERVICES - Firewall - 0 -

  2. #2

    localzuk's Avatar
    Join Date
    Dec 2006
    Location
    Minehead
    Posts
    17,632
    Thank Post
    514
    Thanked 2,442 Times in 1,890 Posts
    Blog Entries
    24
    Rep Power
    831
    Ok, after putting just the result code into Google, and nothing else, I discovered that this issue is a known bug when using TMG in some virtual environments and relates to checksum offloading.

    To fix it, I disabled the various checksum offloads in the device settings for the network card on the TMG box and all is now well.

SHARE:
+ Post New Thread

Similar Threads

  1. Replies: 2
    Last Post: 5th January 2012, 10:57 AM
  2. server 2008 r2 remoteapp with tmg
    By ful56_uk in forum Internet Related/Filtering/Firewall
    Replies: 1
    Last Post: 21st September 2010, 11:06 PM
  3. Replies: 0
    Last Post: 17th May 2010, 09:25 AM
  4. Replies: 0
    Last Post: 30th March 2010, 09:23 AM
  5. Forefront TMG (Beta) and Server 2008?
    By Zimmer in forum Windows Server 2008
    Replies: 2
    Last Post: 19th January 2009, 02:00 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •