I have a site called POS that has TMG 2010 enterprise and is used ONLY as a proxy/caching server for clients to reach out to the internet.

I have another site called PF (via WAN link) that has no internet connection, so clients from PF goes over the WAN to reach the POSTMG server being getting access to the web.

I  have PFTMG configured recently at the PF site, BUT to use the internet from the POSTMG. Pilot clients at PF are manually configured to use PFTMG.

Now I want to do something cool. I recently got ISP internet service at the PF site, so I intend to have PFTMG use the ISP at PF.

I also want to use Wpad, so clients can auto detect proxy i n case my ISP internet service at one site fails. I have one domain with different subnets which are fine.

I am concern with Wifi clients as the Wireless LAN Controller has it's own DHCP for my Wifi clients. Also VPN clients get their DHCP for my checkpoint firewall.

Should I use the Wpad DHCP or Wpad DNS or what do you reco

Hi,

For complex networks with multiple gateways or egress points, DHCP is a better option than using DNS. With DHCP, a web proxy can be configured as a scope option, allowing for the assignment of a unique proxy server on a per-subnet basis. This ensures that users will be configured to use a proxy server that is nearest to their physical location.

Using DNS for WPAD works well for networks that have only a single gateway or egress point. If there are multiple gateways on the network, DNS can still work but will require a geographic load balancing service

Configuring Web Proxy Automatic Discovery (WPAD) in Forefront Threat Management Gateway (TMG) 2010

Note: Microsoft provides third-party contact information to help you find technical support. This contact information may change without notice. Microsoft does not guarantee the accuracy of this third-party contact information.

Best Regards,

Joyce

My LAN WIFI clients and VPN clients gets DHCP from their respective applicances, NOT from the DC DHCP. So I think it may be best to configure Wpad DNS.

So is it you can configure DNS alone for WPad, or both DHCP and DNS has to be configured?

If it's only DNS to be configured, any links for a step by step guide?

Hi,

>>So is it you can configure DNS alone for WPad, or both DHCP and DNS has to be configured?

Yes, you can configure DNS alone for WPAD.

>>If it's only DNS to be configured, any links for a step by step guide?

Please check the blog I posted above that contains the steps.

Best Regards,

Joyce