مشكلة جامده في TMG

السلام عليكم ورحمة الله وبركاتة
علشان مطولش عيكم ، المشكلة بتاعتي مع ISA TMG انا عندي شبكة فيها حوالي 300 جهاز ( او اكثر)
موجود عندي DC ونازل علية Symantec end point Antivirus وكل الاجهزة مربوطه عندي على Switches HP ProCurve
عندي ISA TMG المشكلها كلها هنا ان كل ما اعمل Policy للانترنت http/https واحدد Users معينين واعملهم Deny على بعض المواقع يحصل عندي ان internet Services تقف على كل الناس سواء كانوا دخلين على هذه policy او لا -- ولما جربت بدل ما اشتغل secure nat اشتغل proxy لقيت الدنيا دي اللوز وكل حاجة شغاله تمام

بس انا مسنفعش اشتغل proxy علشان عندي outlook

ايه هو السر ان secure nat ما شتغلش proxy يشتغل

ارجوا الافادة من اهل الخبرة
:ah1::ah46:

Secure nating doesn't support user Authentication , so the TMG asks the incoming traffic about the username and password to check if it is allowed or denied.. the secure nating can't do this or can't provide the TMG with the username nad the password

the sloution is to use both of them on the devices

thanks for replay , but if r u sure if i connect (secure NAT and Proxy ) together the outlook will work good or will take proxy server and override my gateway

:ah17: :ah26: :ah24:

Mainly the Proxy used for the Web explorer only, and if you just used it, you won't be able to use the Internet for any other application like Outlook or even yahoo messenger.

you have to use both of them and no conflict would happen , try and let me know about the result


By the way, doesn't TMG has Firewall Client like in ISA 2006 , if so .. so you have to use it and every thing will be ok

اقتباس:

---

المشاركة الأصلية كتبت بواسطة A7md_IT

Mainly the Proxy used for the Web explorer only, and if you just used it, you won't be able to use the Internet for any other application like Outlook or even yahoo messenger.

you have to use both of them and no conflict would happen , try and let me know about the result


By the way, doesn't TMG has Firewall Client like in ISA 2006 , if so .. so you have to use it and every thing will be ok

---

thanks for reply and sorry for later
but this method came with a lot of conflict with outlook and exchange server so i can't put the two way to apply the Access Rule
any other solution