+ Post New Thread
Results 1 to 6 of 6
Internet Related/Filtering/Firewall Thread, Forefront TMG setups in Technical; Hi folks, Got a Forefront TMG running as a filter until our new broadband supplier comes in October (or possibly ...
  1. #1

    synaesthesia's Avatar
    Join Date
    Jan 2009
    Location
    Northamptonshire
    Posts
    6,512
    Thank Post
    627
    Thanked 1,173 Times in 900 Posts
    Blog Entries
    15
    Rep Power
    524

    Forefront TMG setups

    Hi folks,

    Got a Forefront TMG running as a filter until our new broadband supplier comes in October (or possibly sooner).

    I've tried to take out pretty much *everything* so it's running purely as cache and URL filtering. However, it appears to struggle every now and then (daily, unfortunately) with client authentication - we get errors in the TMG console saying that clients are slow to authenticate.

    Anyone had this and managed to overcome it? Server isn't exactly a powerhorse, it's just a G4 HP ML110, 2008R2, Xeon 3040, 6gb ram and SATA disks (separate for boot and cache). Gigabit network connection, it's on the domain, authentication is "integrated" as we don't want to have to have people enter usernames and passwords again, but naturally when it is slow to auth, it does ask for this information.

    CPU is barely being touched, ditto for network and disk.

  2. #2
    TheScarfedOne's Avatar
    Join Date
    Apr 2007
    Location
    Plymouth, Devon
    Posts
    1,122
    Thank Post
    767
    Thanked 176 Times in 159 Posts
    Blog Entries
    78
    Rep Power
    86
    Ive found it can be a pita like this... but in my case, was doing worse - not prompting and just saying "NO". Was one fix, a regfrag forcing Kerberos off so that it had to use NTLM. I will track it down from my GPOs and post it...

  3. Thanks to TheScarfedOne from:

    synaesthesia (23rd March 2012)

  4. #3

    synaesthesia's Avatar
    Join Date
    Jan 2009
    Location
    Northamptonshire
    Posts
    6,512
    Thank Post
    627
    Thanked 1,173 Times in 900 Posts
    Blog Entries
    15
    Rep Power
    524
    Ah great, cheers that'll be good.

  5. #4

    synaesthesia's Avatar
    Join Date
    Jan 2009
    Location
    Northamptonshire
    Posts
    6,512
    Thank Post
    627
    Thanked 1,173 Times in 900 Posts
    Blog Entries
    15
    Rep Power
    524
    Any joy with that fragment, @TheScarfedOne ?

  6. #5
    TheScarfedOne's Avatar
    Join Date
    Apr 2007
    Location
    Plymouth, Devon
    Posts
    1,122
    Thank Post
    767
    Thanked 176 Times in 159 Posts
    Blog Entries
    78
    Rep Power
    86
    Flip - completely forgot! Sorry....!

    Here it is...

    HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Internet Settings\

    EnableNegotiate (DWORD) - set it to 0

  7. Thanks to TheScarfedOne from:

    synaesthesia (27th March 2012)

  8. #6

    synaesthesia's Avatar
    Join Date
    Jan 2009
    Location
    Northamptonshire
    Posts
    6,512
    Thank Post
    627
    Thanked 1,173 Times in 900 Posts
    Blog Entries
    15
    Rep Power
    524
    Cheers, will give that a go



SHARE:
+ Post New Thread

Similar Threads

  1. Replies: 5
    Last Post: 23rd June 2010, 11:40 PM
  2. Tmg setup
    By ful56_uk in forum Internet Related/Filtering/Firewall
    Replies: 23
    Last Post: 2nd March 2010, 10:28 AM
  3. Forefront TMG Default Gateway
    By teejay in forum Internet Related/Filtering/Firewall
    Replies: 4
    Last Post: 26th January 2010, 03:34 PM
  4. anyone using forefront TMG live yet?
    By HMCTech in forum Windows Server 2008
    Replies: 2
    Last Post: 9th October 2009, 08:40 AM
  5. Forefront TMG (Beta) and Server 2008?
    By Zimmer in forum Windows Server 2008
    Replies: 2
    Last Post: 19th January 2009, 03:00 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •