Once TMG has been installed with 2 interfaces – one pointing to LAN and the other to the Internet you are ready to create the Web Publishing Rule for Lync.
This rule will be used to access GAL, ABS, Web Conferencing (Meet and Dial) as well as Lync Mobile. Of course all of these URLS need to be included in the Public Certificate and Public A record for each name needs to be configured.
So lets get started..
Give the new rule a logical name
Since the Sites will be HTTPS we will use the SSL option
Now we add the internal URL as configured in the Topology Builder
Not required but I no harm in defining this
For Path add /*
The Public name is what is published in Topology Builder as the external URL as well as a name in the SAN Cert. If using the same cert and rule for more URL’s like lyncdiscover then this will need adding later, see last step.
Since this is a brand new TMG no Web Listener exists so we select New and continue. The Web Listener Name is irrevelant but always good to use something descriptive
Select External as this is where the traffic will originate from
Important to note that the certificate actually needs to be in the local store Personal or it wont show up when you click on select Certificate
Select No Authentication as we don’t want the TMG dealing with that
Finishing the Web Listener and continueing on with the Web Publishing rule
Select No Delegation, and Client cannot authenticate directly
And Finish, now you need to Apply the new Policy to TMG