Category: ISA/Forefront

Direct Access 2012 and Outlook RPC/HTTP

I have a client for whom i recently implemented 2012 Direct Access.... there was a number of teething problems in the implementation - but once its working, DA is actually pretty good. If i could ask the product team for anything in DA 2012 R2, it would be re-introduce wildcard certificate support (it was in…

Continue reading

No more TMG

http://blogs.technet.com/b/server-cloud/archive/2012/09/12/important-changes-to-forefront-product-roadmaps.aspx very disappointing to say the least - TMG 2010 is an awesome product, but there was also a lot of opportunity for improvements. (although I had heard that this was going to happen - so its not a surprise) of course it remains to be seen how this is handled - as far as…

Continue reading

Forefront endpoint protection and logon times

Interest for FEP has increased rather dramtically lately for us... which has been cool - as unlike its predessor - FCS, FEP is actually usable! :-) I think this is because of two reasons: 1) FEP will soon be part of the core CAL.... (August 2011) so there are many organisations that can now use…

Continue reading

Symantec Endpoint Protection and UAG SP1

Im a big fan of no anti-virus on servers.... or if you must have it, only the AV component (no network rubbish) with no realtime turned on.... if you have all your endpoints protected and entry points into the network - its just not required. For example - an Exchange server or a Lync server…

Continue reading

Cisco VPN client with Forefront TMG

So this one has been bugging me for a while... and then a client asked for it - so i had to get it sorted.... So it seems with some Cisco VPN connections, i can connect, but not send any traffic when the Cico VPN client is behind a TMG server. Give the VPN client…

Continue reading

UAG, direct access and bad cert names

I purchased a wildcard SSL cert today - as sooooooo many things i want to do on the corporate network now require crl's... so i thought it be worth a little bit of money to remove the hassle of using my internal CA, publishing the crl etc. For this, i purchased a cheapy wildcard (at…

Continue reading

TMG 2010 – slow start ups

Recently a client bought up the slow start-up times of their TMG 2010 cluster nodes.... after they mentioned it, i had a look at a few others (internally and at clients) and noticed the same thing.... and in the event log saw that the TMG Job scheduler took a long time to start (as in…

Continue reading