Search the Community

We moved to Smoothwall last year due to TMG becoming end of life. All seems to have gone well but we still haven't found a suitable solution for publishing Sharepoint. Anyone have any ideas? I am looking for anything that will provide a login form providing SSO to some other web apps as well as Sharepoint. I tried using the web application proxy part of Server 2012 R2 and it was ridiculously difficult and couldn't get it so that users only logged in with their sAMAccountName

We use TMG on our old intranet for Outside and inside authentication and load balancing to two Web front ends on a SharePoint Farm. Any one suggest something that can do the same job for our new SharePoint farm? Tony N

Does anyone know if the Surface RT supports authenticated proxies? Students will start to bring these to school soon and I would like to be able to let them know if we can configure proxy settings as we can in ie/firefox/safari to point to our TMG server.

Hello there. What I'm going to try and explain now may be very vague, but I just want to see if anyone else has had the same issue as me, so here goes! We have a Server 2008 Standard server. Installed on the server is Forefront TMG. I have configured a web chain out to a proxy the entire site uses provided by our local council. I have added all the rules into the firewall that we need as a school, and the net connection works exactly how I would expect it to. The issue I have, is that when any changes are made to any aspect of networking on the server, I get a BSOD telling me that fweng.sys is the problem (I don't have dump log to hand, but I can get it if anyone thinks they might be onto something.) The server can run in a stable fashion if the following is done: Disconnect internal and external interfaces from server Turn on server and leave to boot into Windows Log on and leave to settle reconnect network cables one at a time Check that internal shares can be reached Check that external websites can be reached Log off Once it's up and running, it serves the whole site perfectly until you try to make any changes to it. I can log onto the server and use it in any fashion I wish. So long as I don't try to make any changes in Forefront or adjust any network settings, I can be sure it won't "fall over" again. Obviously this is no good for us, as we are unable to do anything to this server in it's current state. We have disabled the internal network card, and have added an HP Broadcomm adapter in it's place. All drivers have been updated and we have attempted to run Windows update. When Windows update is run, we get a BSOD and the same error message about fweng.sys (which I believe is the Firewall Engine). We have NOT updated the firmware on the network cards, but we will be doing so over half term. Basically, I was wondering if anyone has come across an issue like this. Idea's and suggestions are very welcome.

When trying to access Exchange web mail from external, after logging in I get the following error reported in the browser: Error Code: 500 Internal Server Error. The certificate chain was issued by an authority that is not trusted. (-2146893019) Running TMG Management Console tests on the OWA firewall policy also indicate similar: Destination Server Certificate Error 0x80090325 - The certificate chain was issued by a certificate authority that was not trusted. Following the link reported in the test and actioning to generate a certificate and deploy reported in no errors, however I cannot see the certificate in the AD Certificate server store, nor any mention of certificates in any of the GPO's that I have looked at - the implication is that the certificate is deployed by GPO. The instructions that I followed were from here: Generating the https certificate Deploying the certificate Forefront TMG is running in a domain environment so I opted for automatic deployment as is recommended. We have an enterprise root CA. The note mentions up to 8 hours for the certificate to propagate, but I have done a GPUPDATE on each machine and also waited a significant number of hours, possibly more than 8, with reboots in between. So it looks like its not working rather than simply taking time to deploy. Any suggestions of debugging this error?

Can anyone help - I'm already grey, now losing it as well. Setup Forefront TMG as a one nic proxy server (to replace a really old ISA server). We rely on nottscc to provide firewall and most filtering but want to use this as extra url control and caching. All set up fine to the upstream proxy and all works well apart from the server complains about not being able to connect to the Microsoft Reputation Services servers. IE connects to MRS fine, DNS resolves the correct addresses, SSL connections work fine. The weird thing is on one day it started working and correctly rated URL's, the next day it stopped again. (no changes made at my end) The error message shows up in alerts and from URL category query - 'microsoft firewall service failed to connect to the microsoft reputation service server' Could the problem be caused by the notts council firewall? Any ideas?

Hi, I have successfully setup an Open Directory master (with the help of EduGeek!) and all is working nicely. But, there is a couple of problems that I have ran into... 1. I have set the homepage for Safari using Workgroup Manager but every time a user opens up the app the 'Welcome to Safari' page appears. Is there a way to stop this? 2. Can I set customised toolbars using Workgroup Manager, I would like to add a Home Button to the Safari toolbar. 3. We use Microsoft TMG for web filtering and this requires authentication, I have set this proxy in Workgroup Manager and when the user logs on to one of the Macs they get asked for proxy authentication. They put there username in and ok it, but when they open Safari nothing loads? Thanks for all your help lately!

Hi, Right what I am trying to achieve sounds simple..full VPN access with a windows 7 client into my network. Currently I utilise the VPN supplied by the Grid, which gives me full access to my school's grid allocated 10.105.0.0 subnet. That would all be fine, if my internal network actually used that subnet. How I have my school's network set up is that everything is in a private address range 10.100.0.0 and all clients that require internet access go via a Forfront TMG firewall/proxy (obviously this has two network cards, one in each network). The 10.105.0.0 network contains only the outside NIC of the TMG server and a switch. How I get around the problem now is to simply allow RDP through a specific port on the TMG from authenticated users with an IP in my VPN range. This works fine in most cases, but I have specific need for full VPN. I have no idea how I can actually achieve a scenario where from the client end, I would connect to the Grid's VPN solution and just have full access to my internal network, no messing around. Any ideas?

Right, after careful consideration and several months of troubleshooting I have decided that Microsoft TMG 2010 is an abortion of of product and MS should have decided to kill the line before releasing it. I have tried it on a 2008 R2 VM, 2008 R2 physical host, 2008 physical host and reset it up a few times. Disables all inspection rules, gave it more RAM, implemented extencive logging rules etc. Stupidly I still can't pin down the problems 100% to the dirty TMG box as there is a switch or two in the way that are dodgey but it seems to be the prolem of TMG. Symptoms, continuously dropping packets and choking out internet connections for single clients for up to 15 minutes despite killing off flood mitigation settings and installing every hotfix avalible. Balmer needs to be hit with his own flying chair, removing features from products and releasing tripe like TMG. If I can finally 100% pin it down to TMG I am going to push MS to refund our Volume liscence of it.