Secure nating doesn't support user Authentication , so the TMG asks the incoming traffic about the username and password to check if it is allowed or denied.. the secure nating can't do this or can't provide the TMG with the username nad the password
the sloution is to use both of them on the devices
المفضلات