Shulou(Shulou.com)06/01 Report--

Forefront TMG is a soft firewall of Microsoft, an upgraded version of ISA. It has complete functions and is easy to operate. Here's how to have the client discover the TMG server automatically.

Topology:

2. Windows environment

Domain control: windowsserver 2008x64 R2+DNS+DHCP+AD

TMG:windows 2008x64 sp2+TMG

Test:wndows XP

3. Network equipment

3560 two sets

2960 for each.

4. TMG installation is not explained in detail, which is very similar to the previous isa installation. If you want a comprehensive understanding of TMG, do not make any settings during installation. Customize the settings after the installation is complete. TMG2010 needs to install Windows6.0-KB942288-v2-x64, dotnetfx35 and above.

Open TMG internal properties-> WEB proxy, enable HTTP, and set port 8080

Click Auto Discovery, check the box to publish auto discovery information for this network, and set port 8888. The port number can be defined by yourself.

Firewall client settings, as follows. You can use either the IP address or the TMG server computer name.

TMG the above settings are completed, set a policy, the internal IP can access the TMG.

DHCP Settin

Open DHCP- > right-click IPv4- > set predefined options

Create a new dhcp standard options 252 wpad with the value written as http://10.8.1.100:8888/wpad.dat

10.8.1.100 is the address of the TMG firewall

Add a new key value of 252 to the function of the IP segment to be automatically discovered within the member

The client installs the TMG client and click detect now. You can automatically discover the firewall server.

Note that in my actual run, if I use Firefox's browser and install the TMG client, it is easy to make Firefox crash. If you install the ISA client, this problem will not occur.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.