Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 10 replies
  • Subscribers 0 subscribers
  • Views 20521 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

TMG questions

FJ

hi there

has anyone managed to succesfully integrate a WS1100 with TMG in front of it?

We have a requirement where the TMG needs to be the first port of call for Client devices, and in the documentation it mentions that a TMG can be in front of a WS but so far have been unable to get working.

I have been in contact with Sophos support ( via email ) but they would prefer I don't use the TMG at all.

any help or advice would be appreciated.

:14361


This thread was automatically locked due to age.
Parents
  • 0

    Hi James,

    Welcome to the SophosTalk community.

    I may have misunderstood the question here - so please correct me if I'm wrong!  Are you trying to setup the TMG upstream of the WS1100?:

    Client > WS1100 > TMG > Internet

    This setup will work fine, but proxy settings for the WS1100 will be required in the browser.  However, the AD username will not be reported to the TMG because the WS1100 doesn't provide authentication to upstream proxies.

    You could also consider:

    Client > TMG > WS1100 > TMG > Internet

    The TMG would need the plugin and a web-chaining rule to pass traffic to the WS1100 as an upstream proxy.  It's important that the WS1100 is allowed to download pages directly without being affected by the web-chaining rule (to prevent a proxy loop).

    Hope this helps,

    Tom.

    :15575
Reply
  • 0

    Hi James,

    Welcome to the SophosTalk community.

    I may have misunderstood the question here - so please correct me if I'm wrong!  Are you trying to setup the TMG upstream of the WS1100?:

    Client > WS1100 > TMG > Internet

    This setup will work fine, but proxy settings for the WS1100 will be required in the browser.  However, the AD username will not be reported to the TMG because the WS1100 doesn't provide authentication to upstream proxies.

    You could also consider:

    Client > TMG > WS1100 > TMG > Internet

    The TMG would need the plugin and a web-chaining rule to pass traffic to the WS1100 as an upstream proxy.  It's important that the WS1100 is allowed to download pages directly without being affected by the web-chaining rule (to prevent a proxy loop).

    Hope this helps,

    Tom.

    :15575
Children
No Data
Unfiltered HTML