MCX Forbidden
05 Monday Aug 2013
Posted MCX Forbidden, mobility, TMG
in05 Monday Aug 2013
Posted MCX Forbidden, mobility, TMG
in25 Monday Mar 2013
Posted Quick Reference Guide, TMG
inGood old TMG..
Just a quick reference guide when the grey stuff gets fuzzy 🙂
Add the public names (of course these will match the public A records requested)
What you need is:-
12 Thursday Apr 2012
Posted Install Guide, Quick Reference Guide, TMG
inOnce TMG has been installed with 2 interfaces – one pointing to LAN and the other to the Internet you are ready to create the Web Publishing Rule for Lync.
This rule will be used to access GAL, ABS, Web Conferencing (Meet and Dial) as well as Lync Mobile. Of course all of these URLS need to be included in the Public Certificate and Public A record for each name needs to be configured.
So lets get started..
Select New – Web Site Publishing Rule
Give the new rule a logical name
Since the Sites will be HTTPS we will use the SSL option
Now we add the internal URL as configured in the Topology Builder
Not required but I no harm in defining this
For Path add /*
The Public name is what is published in Topology Builder as the external URL as well as a name in the SAN Cert. If using the same cert and rule for more URL’s like lyncdiscover then this will need adding later, see last step.
Since this is a brand new TMG no Web Listener exists so we select New and continue. The Web Listener Name is irrelevant but always good to use something descriptive
Select External as this is where the traffic will originate from
Important to note that the certificate actually needs to be in the local store Personal or it wont show up when you click on select Certificate
Select No Authentication as we don’t want the TMG dealing with that
Finishing the Web Listener and continuing on with the Web Publishing rule
Select No Delegation, and Client cannot authenticate directly
And Finish, now you need to Apply the new Policy to TMG