I had setup a lab in hyper-v. i have installed two win server 2008 r2. in the first server i had installed ISA TMG 2010 which is connected to an external network and a internal network. the 2nd 2008 R2 is the DC server in which DHCP, DNS, ADDS roles are installed it is also the domain controller. i had also created two client machine which are win7 and win xp. the ip range of internal network is 192.168.14.100 - 192.168.14.200. my DC server is having a static ip 192.168.14.1 and my ISA server is having a static ip 192.168.14.5. i had created access rule in ISA TMG 2010 for allowing internet access in internal network for all outbound process. i am able to browse internet in both the client machine using proxy and also by installing TMG client. but i want to provide direct internet access to internal network without using any proxy or tmg client through ISA TMG 2010. please help...i am a new user

Hi, Thanks for posting here. >but i want to provide direct internet access to internal network without using any proxy or tmg client through ISA TMG 2010. I am not quite understand this part you mentioned, do you mean you want external users to access internal by going through TMG from external/internet ? it’s appreciate you can discuss that in detail. Actually we can achieve the goal by enabling and deploying VPN service on TMG if I understand you properly : Planning for virtual private networks http://technet.microsoft.com/en-us/library/dd897027.aspx Thanks. Tiger Li Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

want to provide direct internet access to internal network without using any proxy or tmg client through ISA TMG 2010 by the above i mean providing internet access to internal user.....not VPN.......

Parth, Ok as my understanding you want to configure your ISA like "user can access internet without proxy setting" 1. Create your rule for internal DNS server 2. Off settings realted to your ISA proxy server. try this settings. Thanks

sir, i didnt get your answer. are you trying to say that i should create a rule to allow DNS server from internal to external network for all users

Yes , you have to create a rule for your internal DNS server for all user, and off all your settings related to Proxy settings.

Hi Parth, Thanks for update. Agree with Prabhas. But perhaps we will get the most qualified pool of respondents form TMG/IAS forum: http://social.technet.microsoft.com/Forums/en-US/Forefrontedgegeneral/threads Thanks. Tiger Li Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.