When i open any web site browsing it will be open after 1 minute i do not why.
1) Domain dc Windows server 2008R2
2) ADC Windows server 2008R2 + tmg 2010
Technology Tips and News
When i open any web site browsing it will be open after 1 minute i do not why.
1) Domain dc Windows server 2008R2
2) ADC Windows server 2008R2 + tmg 2010
Log
Denied Connection 7/10/2013 10:37:31 AM
Log type: Firewall service
Status: The action cannot be performed because the session is not authenticated.
Rule: IT LaB
Source: Internal (192.168.10.*:56370)
Destination: External (193.45.10.138:80)
Protocol: BranchCache - Retrieval
Denied Connection 7/10/2013 10:37:42 AM
Log type: Web Proxy (Forward)
Status: 12209 Forefront TMG requires authorization to fulfill the request. Access to the Web Proxy filter is denied.
Source: Internal (192.168.10.*:56375)
Destination: 192.168.10.*:80
Request: GET
http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?c4e2aa8623de33a5
Filter information: Req ID: 17054a30; Compression: client=No, server=No, compress rate=0% decompress rate=0%
Protocol: http
User: anonymous
Denied Connection 7/10/2013 10:37:47 AM
Log type: Firewall service
Status: A broadcast packet was dropped by the Forefront TMG policy.
Rule: None - see Result Code
Source: Internal (192.168.10.*:58433)
Destination: External (224.0.0.252:5355)
Protocol: Link-local multicast name resolution
Denied Connection 7/10/2013 10:37:49 AM
Log type: Web Proxy (Forward)
Status: 12209 Forefront TMG requires authorization to fulfill the request. Access to the Web Proxy filter is denied.
Rule: IT LaB
Source: Internal (192.168.10.*:56382)
Destination: External (192.168.10.*:8080)
Request: GET
http://evsecure-ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBS56bKHAoUD%2BOyl%2B0LhPg9JxyQm4gQUf9Nlp8Ld7LvwMAnzQzn6Aq8zMTMCECxI3ZMN9VmO%2BTyZVHpg7UM%3D
Filter information: Req ID: 17054a51; Compression: client=No, server=No, compress rate=0% decompress rate=0%
Protocol: http
User: anonymous
Good day.
As I see in log listing there is some problem in authorization mechanism on TMG.
I recommend you set up on TMG connection verifiers to domain controllers.
Additionally change IT LaB rule setting to give access from special IP addresses not for users and check.
Thank you for reply
but i do not know how to verifier connection to domain Controller kindly give me a step.
If everything will be OK change rule settings.
Arfiquin
No problem Connection verifier from Active Directory Domain contorallers and DNS.
Hi,
make sure that DNS name resolution is working correctly. Please check your TMG configuration against this article:
http://social.technet.microsoft.com/wiki/contents/articles/recommended-network-adapter-configuration-for-forefront-tmg-standard-edition-servers.aspx
this is my Rule sitting plz see and suggest.
Change IT LaB rule condition to All Users.
And check TMG configuration recommended by Marc.Grote
Hi,
i i have done TMG configuration against that article but problem is same .
When i open any web site browsing it will be open after 1 minute i do not why.
plz give me solution.
Can you provide server configuration, number of concurrent connection, and cache setting in TMG (enabled or not, what kind of disk storage used for cache).
Ultrasurf & freegate proxy software when we use then browsing work very fast but when i am using through tmg 2010 then it is not working fast.
Dear everything is okay problem is not in this area which you ask about me problem in TMG policy because i was using Websense after expire websense license it is work slow.
![]() |
Web Filter v7.6 |
![]() |
Web Security v7.6 |
1. | Log on with local administrator privileges. |
2. | Choose to uninstall a program: |
![]() |
Windows Server 2003: Go to Windows Control Panel > Add or Remove Programs. |
![]() |
Windows Server 2008 (x64): Go to Windows Control Panel > Control Panel Home > Uninstall a program (under Programs). |
3. | Select Websense Web Security / Web Filter, and then click Change/Remove (Windows Server 2003) or Uninstall/Change (Windows Server 2008). |
4. | On the Remove Components screen, select Filtering Plug-in and any other components to be removed, and then click Next. |
5. | When the Stop Microsoft Firewall Service screen appears, stop the Microsoft Firewall service and then click Next. |
![]() |
Note Leave the Websense uninstaller running as you stop theMicrosoft Firewall service, and then return to the uninstaller to continue. |
![]() |
Important When the Firewall service is stopped, ISA/TMG goes intolockdown mode. Depending on your network configuration, network traffic may be stopped. Typically, the Firewall service must be stopped for only a few minutes. |
6. | When the following message appears, start the Firewall service and then click OK: |
![]() |
Note Leave the Websense uninstaller running as you start the Firewall service, and then return to the uninstaller to continue. |
7. | On the Websense Software Removed screen, choose whether you want to restart now or later and then click Done. |