網頁

2012年6月10日 星期日

Install Microsoft Forefront TMG 2010 (part 3 of 3)

The previous article(part 2) has already finished the Getting Started Wizard. In the moment, it will continue to run the Web Access wizard after enable check box and click “Close” button.
ScreenHunter_06 Jun. 02 23.10In the beginning screen, please directly click “Next >” button if you clearly this wizard will helps you define something.
ScreenHunter_07 Jun. 02 23.12URL FilteringSelect “Yes, create a rule blocking the minimum recommended URL categories” option next to click “Next >” button
ScreenHunter_08 Jun. 02 23.12It will show a rule about Block access to these Web destinations. If no need to add other rule, please directly click “Next >” button
ScreenHunter_09 Jun. 02 23.12Malware and HTTPS Inspection
In Malware Inspection Settings, selecting “Yes, inspect Web content requested from the Internet” and “Block encrypted archives…”  for scanning HTTP content requested from Internet.
ScreenHunter_10 Jun. 02 23.13In HTTPS Inspection Settings, select “Allow users to establish HTTPS connections to Web sites” and “Inspect HTTPS traffic and validate HTTPS site certificates” option for let TMG can scan HTTPS traffic.
ScreenHunter_11 Jun. 02 23.13In HTTPS Inspection Preferences, select “No, do not notify users of HTTPS inspection” option if HTTPS traffic is inspected and “Use a certificate automatically generated by Forefront TMG” option for generating the HTTPS inspection certificate.
ScreenHunter_12 Jun. 02 23.14Web Caching
Due to this TMG is not a member of a Windows Active Directory Domain, it just only selection for us to choose “I will manually export and deploy the certificate” for deploying HTTPS inspection trusted root CA to the client computers.
Please click “Browse…” button for where is the exported certificate location.
ScreenHunter_13 Jun. 02 23.15Choose the right location as “My TMG 2010” and assign a file name as “https inspection trusted root CA” next to click “Save” button
ScreenHunter_15 Jun. 02 23.19Click “Next >” button if the certificate path and name is right.
ScreenHunter_16 Jun. 02 23.20In Web Cache Configuration, I want to enable the default Web caching rule so that need to create Cache Size by click “Cache Drives…” button
ScreenHunter_17 Jun. 02 23.20Select “Drive C:” and write down Maximum cache size(MB) “1024” next to click “Set” button
ScreenHunter_18 Jun. 02 23.21You will see Cache size has value “1024” now. Click “OK” to exist this setting.
ScreenHunter_19 Jun. 02 23.21Click “Next >” button to complete Web Cache Configuration.
ScreenHunter_20 Jun. 02 23.21Until now, we have already complete the Web Access Policy Wizard”.
ScreenHunter_21 Jun. 02 23.22Finally, we need to save changes and update the configuration by clicking “Apply” button.
ScreenHunter_24 Jun. 02 23.46The Firewall Policy will define some policy based on the above setting now.
ScreenHunter_26 Jun. 02 23.47

<<< Install Microsoft Forefront TMG 2010 (part 2 of 3)

Install Microsoft Forefront TMG 2010 (part 1 of 3) >>>


Since 2010 Design by Davidwa
©Copyright Davidwa Inc. All rights reserved.