Hello TMG experts,

I am new to TMG fore front management.

I have a TMG Forefront Environment as Stand Alone Array with NLB (Load Balanced) in Workgoup environment. This is acting as reverse proxy for as many as 40 Public Facing and very critical websites. It has SP2 and Roll up 1 installed already. The system is working absolutely fine since last 1 year.

Our compliance team has asked us to install the latest patches on it which is SP2 Roll up 5. I have following questions regarding it.

1. Is it mandatory to install Roll Up 5 on our environment when SP2 Rollup 1 is already installed and working absolutely fine?

2. Can we directly install Roll UP 5 just after Roll up 1. (what about Rull up 2 , 3 and 4) ?

3. what are the steps to install Rull UP 5 on a Load Balanced (NLB) stand Alone array in work group Environment.?  Honestly I can not afford if the system goes down after the installation of Rollup :-(.

Please suggest.

Regards

Lalit

Hi Lalit,

1. Since TMG is a security product it is always best to install the latest Service Packs and Rollups. But it is also to make your system stable, which you say it already is.
2. You have to install Rollup 2, 3, 4 and finally 5. Unless you install a Service Pack.

In case it might get handy, below you find a list with all updates:

Thanks Boudewijn,

So If we decided to go ahead with installation of Remaining Roll UPs on the system, could you please help me find the answer of my 3rd query?

"3. what are the steps to install Rull UP 5 on a Load Balanced (NLB) stand Alone array in work group Environment.?  Honestly I can not afford if the system goes down after the installation of Rollup :-(. "

Regards

Lalit

For #2, that is actually not correct.

You don't need to install all rollup 2-4 before installing rollup 5. I know what the KB articles says for the roll-ups but is not needed. They are mini service packs and cumulative.

For #3 see https://technet.microsoft.com/en-us/library/ff717843.aspx#enterp

Same procedure applies regardless if it is a service pack or roll-up you are installing.

Thanks a Lot Anders,

I am planning to install Roll UP 5 on my TMG Forefront Environment.

Here is my plan, Please suggest if this seems ok.

Current Environment : 

• TMG forefront 2010 SP2 Rollup1
• Stand Alone Array in Work Group Environment with Network Load Balancing Enabled.
• TMG1 = Array Manager
• TMG 2 = Array Member (
• Both nodes serve the requests in Load Balanced Mode - NLB).

Steps I am planning to install Roll UP 5 on it

1. Disable Network load balancing from TMG console (Array Manager Node).

2. Drain current connections from "Array Member" Node.

3. Stop NLB service on "Array Member" Node.

4. Install Roll up 5 on "Array Manager" Node (TMG 1)

5. Install Roll up 5 on "Array Member" node (TMG 2).

6. Start NLB service on " Array Member" Node

7. Enable Network Load Balancing from TMG console (Array Manager Node).

Please suggest if these steps are correct?

Also pls let me know if I need to disjoin the Node - TMG 2 from Array in order to install the Roll up?

Regards

Lalit

Skip step #1 and #7 and you'll be good to go.

No need to disjoin any host. 

Thanks Anders :-) 

I will install the this rollup next week and will update you about the outcome..

Regards

Lalit