Find and manage updates in one place for the Microsoft Forefront family of products and related technologies. more..... more »

Brought to you by Yuri Diogenes and Tom Shinder! http://blogs.technet.com/b/yuridiogenes/archive/2010/07/08/new-forefront-books-by-microsoft-press.aspx HTH, Deb DEBRA LITTLEJOHN SHINDERMVP (Enterprise Security)“MS SECURITY”dshinder@isaserver.org. more..... more »

Check out this announcement of a new UAG book from Ben Ari and Ran Dolev: http://tmgblog.richardhicks.com/2010/09/02/microsoft-forefront-unified-access-gateway-uag-administrators-handbook/ HTH, Deb DEBRA LITTLEJOHN SHINDERMVP (Enterprise Security)“MS SECURITY”dshinder@isaserver.org. more..... more »

Interesting find by Richard Hicks. It’s an Excel workbook that includes a number of entries on what you need to do to make sure your UAG arrays stay up and running. One problem with the advice is that it recommends automation in a number of places (using PowerShell, for example) but doesn’t provide any advice on how to do it. In addition, Powe.. more »

Of course, it’s always appropriate to put the TMG firewall on the edge of the network – that’s what it was designed for! However, if you have multiple firewalls options on your network, you might want to place your TMG firewall in different locations depending on your requirements. more..... more »

If you’re running your TMG firewall or UAG server in a Hyper-V virtual environment, then you’ll want to know about this update. http://blogs.technet.com/b/isablog/archive/2010/08/24/hyper-v-update.aspx HTH, Tom DEBRA LITTLEJOHN SHINDERMVP (Enterprise Security)“MS SECURITY”dshinder@isaserver.org. more..... more »

ISA and TMG had some good basic level of reporting in the past – but one thing that ISA and TMG admins have wanted for a long time were reports that would tell them what their users were up to. However, to get this kind of information, you had to create you own reports manually, or use a third party solution. Microsoft fixes this situation with TM.. more »

Ouch! What’s up with that? Richard Hicks solves this problem in his blog post over at: http://tmgblog.richardhicks.com/2010/08/07/running-windows-update-on-a-tmg-firewall-fails-with-result-code-80072ee2/ HTH, Deb DEBRA LITTLEJOHN SHINDERMVP (Enterprise Security)“MS SECURITY”dshinder@isaserver.org. more..... more »

Here’s a great article by Yuri Diogenes on a TMG firewall installation issue. more..... more »

Speaking of interface binding order, did you know that interface binding order can affect performance? I know that I didn’t know that! Check out this article from Yuri Diogenes and how he discovered this fact: ht.. more »

Benoit Sautiere, a Forefront MVP, has put together a great series of articles on how to configure UAG DirectAccess in a high availability array. Check it out at: http://danstoncloud.com/blogs/simplebydesign/archive/2010/08/11/directaccess-high-availability-with-uag-2010-part-1.aspx HTH, Deb DEBRA LITTLEJOHN SHINDERMVP (Enterprise Security)“MS SE.. more »

“This post describes a scenario where the external user was trying to access OWA published through TMG 2010 and the request was timing out. more..... more »

One of the things we used to do a lot of with the ISA firewall was publish web sites on alternate ports. While there’s little to be gained from a security perspective from doing this, there is the advantage of conserving IP addresses, since you can use the same IP address and publish multiple sites on that address by using different port numbers. mo.. more »

“The KB980346 update published today by Microsoft upgrades the underlying Windows SChannel used by Forefront TMG 2010 to support the secure TLS renegotiation extension. This should be available in both the reverse web proxy(web server publishing) and for forward web proxy scenarios(when the HTTPS Inspection is used). more..... more »

“Consider a scenario where a TMG administrator has configured their TMG Server 2010 installed on a Windows Server 2008 R2 for inbound VPN connections. External VPN users (two or more users) are behind a NAT device, which NATs all outbound L2TP VPN traffic. When users try to connect using L2TP VPN connections, only one user from this network can co.. more »

I always get a kick when I hear Cisco guys tell me that the TMG and ISA firewalls can’t be secure because they run on Windows. Never mind that there hasn’t ever been a documented attack against a ISA or TMG firewall. more..... more »

“In order for SSTP (Secure Socket Tunneling Protocol) and DirectAccess to work properly the SSTP and DirectAccess client must have access to the CRL (Certificate Revocation List) of the server certificate (if you are using Client Certificate or Smart Card authentication you will also need access . more..... more »

One of the major advantages that DirectAccess has over traditional remote access solutions is that it enables IT to always be connected to their managed clients. This allows you to make sure your managed clients are always up to date and meet your desired configuration requirements. more..... more »

I’ve been seeing a few questions lately regarding TMG support for v3 certificates. Does TMG support these CNG certificates? Find out by going to Yuri Diogenes blog! http://blogs.technet.com/b/yuridiogenes/archive/2010/07/20/incorrect-key-type-when-creating-a-web-lister-on-tmg-using-v3-certificate.aspx HTH, Deb DEBRA LITTLEJOHN SHINDERMVP (E.. more »

“In Forefront TMG 2010 configuration change is by default asynchronous for both Standard Edition and Enterprise Edition. Some people have asked to be able to change the behavior to synchronous, so that the administrator will know the configuration has been loaded by the TMG computers when the Save Configuration Changes completes. more..... more »