Forefront tmg 2010 features install#
Forefront tmg 2010 features windows#

This port is really important if you are collocating OCS Services, or even in this case where we have multiple CWA virtual servers on the same server. This is seperate from the web site listening settings. The next screen has you specify a port to listen to OCS traffic. On the next screen, enter a name to identify the external web site such as CWA External. In our example, I will be using a single IP address and utilizing bridging with Forefront TMG, so I will enter the port as 4443. If you have an additional IP address you can use port 443 with a separate IP than your internal server. The next screen has you specify the IP address and port the web site will listen on. You can choose HTTP if you are using an SSL Accelerator device, but you cannot use CWA over HTTP without such a device.Д¬hoose the certificate you created with all the necessary name entries and hit Next The next screen has you specify an SSL certificate to be used with the https requests. The next window confirms those authentication settings, notice NTML is grayed out.

Forefront tmg 2010 features windows#

Although it says in the description that the built in windows integrated and forms-based authentication will be used, the external web site will only allow Forms-Based Authentication.

If you were using a third party authentication method you would specify it here. The next window allows you to choose your authentication types. The first splash screen just gives basic information about requirements for this task, just hit Next.ДЄt the next window, this is where you will choose your web server type, choose External. Right click on the server name and choose Create Virtual Web Server.

Forefront tmg 2010 features install#

I will outline creating the external web server, assuming an internal web server has been configured listening on port 443.ДЇirst, open the Communicator Web Access management console, this is separate from the OCS 2007 R2 primary admin console, but is included when you install the admin tools on any machine. Our external site however will run on port 4443, and we will perform bridging with the forefront TMG server to give users access to this site. In our example our Internal site will be a standard internal site listening on port 443. Custom authentication can be used to perform two factor authentication with services like RSA or other smart card/pin authentication methods. External sites will use Forms-Based Authentication, or Custom Authentication. Internal sites will let you choose NTLM authentication, which allows for simple access from inside the corporate network on domain joined machines. The only difference is authentication type. When you create virtual servers for CWA you have two options for site types, Internal and External.

One for internal access and one for external access. In my example I have two web sites configured on the CWA server. Subject Alt Name(s): as. CWA Web Site Configuration In my environment I have the following certificate information:

Your certificate will need to have all of the names above on it.