Forefront TMG 2 proxy ports wit caching to 2 different up-stream servers staff/Stude

[Cools]

Just setting up FF TMG for the 1st time.. just want to know if i can have

2 proxy ports with caching to 2 different up-stream servers Staff/Students

 

eg.

staff 8087 >>> Cache >>> upstream proxy (10.15.48.7:80)

Students 8080 >>>> Cache >>> upstream proxy (10.15.48.5:80)

 

can this be done if so how?

kinda new to FFTMG..

[SYNACK]

No need for two different ports, just use different access rules that allow the staff group or the students group directly to that address over port 80 then set the machines to use the external proxy address. TMG will act as a transparent proxy and forward the request based on group membership.

 

The TMG does need to be a default gateway of either the client machines or of the router that handles the vlan switching for that method to work though.

Edited July 4, 2011 by SYNACK

[Cools]

where can i find info on this SYNACK..

[SYNACK]

This has a bunch of screenshots, Forefront TMG 2010: How to install and configure Forefront TMG 2010 —-Step by step « Information Technology Blog its quite a big topic so you may need to ask questions on specific areas to get the information you are after quickly.

[Cools]

thanks again synack...

[Cools]

But can i have 2 external proxy address as the LEA provide 2 proxy's 1 for staff and 1 for students..

[SYNACK]

You can have as many proxies as you want, the way my solution works is to configure the stations to point to the external proxy directly. This should be on a different network to the client and so the client will send the request to the default gateway (TMG). TMG should check the originator and choose the rule based on the group of the client username. This allow rule will allow and route the traffic to the internal to the LEA proxy directly.

 

As to proxy chaining with the proxy feature I have never dealt with doubled up proxies so I am not sure about configuring this.

[Cools]

i give up with it TMG has to may problems.. i'll stick with Linux at least i can get it to do what i want..

[SYNACK]

i give up with it TMG has to may problems.. i'll stick with Linux at least i can get it to do what i want..

 

- same way I think just in reverse, it just depends on your skillsets.

[gshaw]

I was going to get into TMG to replace our Linux firewalls but I've seen MS are discontinuing the product after this version (although it will still get patches etc)

 

Not sure if it's worth the pain of moving what works over to TMG and getting used to its methodology for a product that's on death row