Good Morning All,

I need your help at following situation. I have TMG 2010. When I try to access a URL on my computer and in the same time I activate login TMG monitor. I receive following information regarding to the failed connection attempt :

Failed Connection Attempt Proxy
Log type: Web Proxy (Forward)
Status: 12204 The specified Secure Sockets Layer (SSL) port is not allowed. Forefront TMG is not configured to allow SSL requests from this port. Most Web browsers use port 443 for SSL requests.  
Source: Internal (172.xx.xx.xx:4229)
Destination: 172.xx.xx.xx:8443
Request: 125.xx.xx.xx:8443
Filter information:  
Protocol: SSL-tunnel
User: anonymous
 Additional information
Object source: Internet (Source is the Internet. Object was added to the cache.)
Cache info: 0x0
Processing time: 0 MIME type

I've added the port 8443 to ssl tunnel range with following VBS script:

Dim root
Dim tpRanges
Dim newRange
Set root = CreateObject("FPC.Root")
Set tpRanges = root.GetContainingArray.ArrayPolicy.WebProxy.TunnelPortRanges
set newRange = tpRanges.AddRange("SSL 8443", 8443, 8443)
tpRanges.Save

And with following Script I can confirm that the port has been added correctly:

Dim root
Set root = CreateObject("FPC.Root")
Dim isaArray
Dim tpRanges
Dim tpRange
Set isaArray = root.GetContainingArray()
Set tpRanges = isaArray.ArrayPolicy.WebProxy.TunnelPortRanges
For Each tpRange In tpRanges
WScript.Echo tpRange.Name & ": " & tpRange.TunnelLowPort & "-" & tpRange.TunnelHighPort

Next

But the behavior is the same: Failed Connection Attempt Proxy and same message in the  monitor.

I don't know if i need to applied another extra step or if I missed any information.

Could you help me

Thanks Jon

Hi,

The Firewall service has been restarted after you changed the Tunnel port range?

NO

Marc,

After the Service reboot, the access to site was done.

Thank you