Here’s a new Knowledge Base article we published today. This one talks about an issue where HTTP redirects in TMG 20101 fail if the Exchange Edge role is installed on the same box: If you deploy Microsoft Threat Management Gateway 2010 (TMG) and the Exchange 2010 Edge role on the same machine, you may encounter an issue where HTTP Redirect in TMG fa.. more »

The seed can be an *.asc or *.xml file and is typically supplied with the token. The seed is the tokens’ factory encoded random key. Each token has a unique key (seed). The seed file is imported into the associated RSA Authentication Manager server. User accounts information is added to the RSA Authentication Manager. New users are created under th.. more »

Today I would like to describe an easy way to solve a small visualization mismatch related to the administrator in a country where English regional settings are not used, it could be possible that, when entering the TMG section, you're going to find something like this: are two powerful mechanisms which allow to provide full protection against .. more »

Some days ago a customer opened a case because an ISA array was randomly refusing all the incoming connections and a restart of the Firewall Service was required to make the connections be accepted again. After a quick investigation we figured that the cause of the issue was that the Firewall Services went in Lockdown mode after a log failure. Both .. more »

Here’s a new KB article we published on TMG 2010. This one actually first came out a couple weeks ago but since it wasn’t announced at the time I thought I’d send out a quick heads up just to let you know it was there. This KB article talks about an issue where an installation of SP1 or SP2 at a branch office fails and then rolls back just after .. more »

In this blog post I want to discuss a solution, which we provided to one of our customers. The problem was linked to a published web site where specific flash content had not been compressed as expected by TMG/ISA. The first thing which is important to mention is, that it usually it not necessary to compress flash content. My customer had the need .. more »

Hello All! It’s Brett Crane from the Forefront Edge team here at Microsoft. I wanted to take a few moments to talk about an issue you may see in your RRAS environment if you are utilizing NLB to load balance your External Interfaces of your TMG Array and you’re using an IPSec based Method. Here is a problem statement you may be facing: Based on the .. more »

Richard Hicks (Forefront MVP) was interviewed by Tom Shinder and Yuri Diogenes for their Security Talk Show called From End to Edge and Beyond. In this interview Richard explains and demonstrates some of the new capabilities of Forefront TMG SP2.  Check it out the interview here: h.. more »

4)) & 15]; h and replace this part with those lines: for(var i=0; i4)) & 15]; h afterwards you have to delete this line: 5. After you prepared your WPAD configuration file, use the script attached For a full list of options please refer to the readme.txt provided in the ZIP Please be aware, that any changes you configure in the ISA/TMG If you want .. more »

In this scenario I am going to share a very unique issue which I came across while trying to join one of the TMG servers to the Stand alone array. In this case we had two Enterprise Edition TMG servers installed on an Appliance. We had two Enterprise Edition TMG servers and we were trying to join one of the servers to the Stand alone array pointing .. more »

Earlier today we released an updated version (found ) of the Definition Update Automation Tool for Forefront Endpoint Protection 2010 Update Rollup 1. This document provides steps for how to use this tool. With Forefront Endpoint Protection 2010 Update Rollup 1, you now can deploy Forefront Endpoint Protection definition updates to clients by using .. more »

We are happy to announce the availability of Forefront Threat Management Gateway (TMG) 2010 Service Pack 2 (SP2). The service pack is available for download from the Here are some of the improvements we are introducing in Forefront TMG SP2: – Forefront TMG SP2 includes a new site activity report that enables you to generate a report showing the da.. more »

We are happy to announce that Update 1 (UP1) for Forefront Unified Access Gateway (UAG) 2010 Service Pack 1 (SP1) was released today. It is now available for download from the Microsoft Download Center as an upgrade from UAG 2010 SP1. Update 1 enhances UAG’s application publishing scenarios by adding support for: Dynamics CRM 2011 Microsoft Lyn.. more »

“enforce strict RPC compliance” and apply it. This is because TMG/ISA blocks DCOM by design and DCOM is required to acquire a certificate. You can also use the following command from the command line to check the CA availability on any server: if everything is fine we should get: Server "via-WIN2008DC-CA" ICertRequest2 interface is alive Cert.. more »

One of the reasons for using an array is the availability of NLB, which is known to provide fault tolerance and load balancing. NLB relies on heartbeats to determine whether the cluster nodes are alive. The nodes divide the potential client IP addresses among each other (in fact actually the hashes of the IPs) and send each other heartbeats, .. more »

We’re pleased to announce the launch of the new Microsoft Server and Cloud Platform website (http://www.microsoft.com/server-cloud).   The new site is a comprehensive source for information relating to our private cloudand virtualization solutions, as well as other solutions based on WindowsServer, System Center, Forefront and related prod.. more »

Users like you make all the difference in the quality of our products. The Microsoft Assessment and Planning (MAP) Toolkit Team will soon start recruiting Beta participants for our next version’s Beta program. We’re currently recruiting users of Forefront Endpoint Protection 2010. We of course welcome anybody who is interested in the MAP prod.. more »

In this article I want to provide a detailed view on a possible performance issue you might face, when you’re publishing CRM 2011 IFD using ISA Server or TMG. Please note that the screenshots provided in this article are based on TMG, however the configuration in ISA is very similar to the configuration described in this article. This article wo.. more »

the availability of Forefront Identity Manager 2012 R2 beta. Some of the key areas we’re enhancing with this release include: To join the beta program and download the software, click We are also pleased to announce that the Forefront Identity Manager Community Evaluation Program will commence on the 2nd of August with our first session. Co.. more »

We’ve become aware of two issues when using the Definition Update Automation Tool. This blog article presents workarounds for the issues. Definition Update Automation Tool fails to add new definition updates to the deployment package FEP 2010 Definition Update Automation Tool may fail to add new definition updates to your deployment package. Re.. more »