One of the major advantages that DirectAccess has over traditional remote access solutions is that it enables IT to always be connected to their managed clients. This allows you to make sure your managed clients are always up to date and meet your desired configuration requirements. more..... more »

I’ve been seeing a few questions lately regarding TMG support for v3 certificates. Does TMG support these CNG certificates? Find out by going to Yuri Diogenes blog! http://blogs.technet.com/b/yuridiogenes/archive/2010/07/20/incorrect-key-type-when-creating-a-web-lister-on-tmg-using-v3-certificate.aspx HTH, Deb DEBRA LITTLEJOHN SHINDERMVP (E.. more »

“In Forefront TMG 2010 configuration change is by default asynchronous for both Standard Edition and Enterprise Edition. Some people have asked to be able to change the behavior to synchronous, so that the administrator will know the configuration has been loaded by the TMG computers when the Save Configuration Changes completes. more..... more »

Now that UAG is the future of remote access for Microsoft, TMG has taken a second place in that area. That’s why we cover UAG here on ISAserver.org. In addition, the TMG firewall is included with the UAG server, to protect the UAG server and provide it with some additional functionality. We’re really excited about DirectAccess over here. It’s defini.. more »

Here’s a great video done by TechNet in Sweden on how TMG and NAP work together. Thanks to PsYteAk for the link! vpn_forefront_anders_o.wmv HTH, Deb DEBRA LITTLEJOHN SHINDERMVP (Enterprise Security)“MS SECURITY”dshinder@isaserver.org. more..... more »

The “Edge Man” Tom Shinder discusses an interesting issue in his blog post on using ping to troubleshoot DirectAccess connections. It had been my impression that if I could ping the UAG DirectAccess server and hosts behind the UAG DirectAccess server then everything was good in terms of the DirectAccess connectivity situation. However, what I lear.. more »

UAG DirectAccess interest and adoption is accelerating like crazy! But one thing that people have been having problems with sizing their UAG DirectAccess servers for their DirectAccess arrays. Sizing your DirectAccess UAG servers is important because there is a lot of overhead in the IPsec and IP-HTTPS encryption used by the UAG DirectAccess .. more »

Hat tip to Jason Jones for finding some really useful information on the TechNet wiki! http://blog.msedge.org.uk/2010/05/certificate-revocation-list-crl.html On the TechNet wiki, the PKI team put up a nice list of products and applications that perform CRL checks and how you can control the CRL check behavior. more..... more »

Slipstreaming service packs into RTM media is always useful – it’s a big time saver! So, how about slipstreaming TMG SP1 into the TMG RTM? No problem – Richard Hicks has you covered. Check out his post on how to slipstream TMG SP1 into the RTM build over at: http://tmgblog.richardhicks.com/2010/06/29/how-to-slipstream-service-pack-1-for-tmg/ HTH, D.. more »

“The Forefront Unified Access Gateway (UAG) 2010 Best Practices Analyzer (BPA) Tool is designed for administrators who want to determine the overall health of their Forefront UAG computers and to diagnose current problems. The tool scans the configuration settings of the local Forefront UAG computer and reports issues that do not conform to the re.. more »

First, I have to say that I LOVE that Richard Hicks calls the “TMG Client” the TMG Firewall Client. There was absolutely no reason to change the name of the Firewall Client to the “TMG client”. If they wanted to change the name, they should have been technically honest and just renamed the client to it’s previous name, the “Winsock Proxy Client.. more »

Jason Jones points out that the NLB fix that applies to TMG also must be run on the UAG server if you want to enable Network Load Balancing. You can install this fix before or after the UAG server software is installed. However, you should do it before you enable NLB on the array. more..... more »

Tom Shinder “The Edge Man” talks about DirectAccess and VPN in his technet blog entry over at: http://blogs.technet.com/b/tomshinder/archive/2010/06/28/directaccess-is-not-a-replacement-for-vpn.aspx I found this to be an interesting discussion because when I talk to people who are thinking about DirectAccess, they usually couch it in the cont.. more »

Check out this post from Yuri Diogenes regarding three new Forefront books he and Tom have ready to come out in the near future: http://blogs.technet.com/b/yuridiogenes/archive/2010/07/08/new-forefront-books-by-microsoft-press.aspx HTH, Deb DEBRA LITTLEJOHN SHINDERMVP (Enterprise Security)“MS SECURITY”dshinder@isaserver.org. more..... more »

I had the chance to go to New Orleans this year to attend TechEd North America. I had a great time and got to meet a lot of people that I’ve had only online interaction with in the past. While I didn’t get to spend my time at the UAG and TMG booth (Tom spent about 20 hours there), I did have the chance to staff the Remote Desktop Services boot.. more »

Check it out at: http://blogs.technet.com/b/tomshinder/archive/2010/06/30/solving-a-directaccess-client-blocked-6to4-connection.aspx HTH, Deb DEBRA LITTLEJOHN SHINDERMVP (Enterprise Security)“MS SECURITY”dshinder@isaserver.org. more..... more »

NLB is always a challenge. When it doesn’t work, you have to figure out if its a problem with the NIC driver, a problem with the switches the NICs are connected to, or something else that you might never think about if it weren’t for NLB. In this article Meibo Zhang describes a scenario where getting into the advanced configuration interface of the .. more »

When doing presentations on the Unified Access Gateway (UAG) 2010, I’m surprised by the number of people who know something about UAG but didn’t know that when you install UAG, TMG is automatically installed with it. more..... more »

As most of your are probably already aware – DirectAccess runs on a base of IPv6 networking. Not that you need to know anything about IPv6 to get started using UAG and DirectAccess; UAG takes all that IPv6 heavy lifting and puts all the pieces in place for you with little IPv6 muss or fuss on your part. more..... more »

TMG SP1 is now available and ready for your downloading pleasure! We usually think of Service Packs as a collection of fixes – but sometimes there’s Christmas in July and you get a bunch of cool new features and tools. That’s what you’ll find with TMG SP1. more..... more »