Microsoft Forefront Threat Management Gateway TMG is the new name of ISA server, Microsoft make dozen of enhancement by adding more and more features, I’m going to start install and configure TMG on Virtual Environment.

System Requirement

TMG support Windows Server 2008 64 bit only, and it needs at least 2 GB of RAM as Minimum, and 2.5 GB of disk space.

Microsoft recommends the following specification to run TMG in good manner:

• Windows Server 2008 (R2 or SP2)
• CPU 4 Core (2 CPU dual core or 1 CPU Quad Core) 64-bit processor
• 4 GB of RAM
• 2.5 GB of disk space
• One separate disk for caching and malware inspection
• 2 network cards for simple design and three network cards for DMZ design

The diagram below is shown how TMG will be installed in the Virtual environment:

Let’s get started…

1-      Download the beta version of TMG:

http://www.microsoft.com/DOWNLOADS/details.aspx?FamilyID=e05aecbc-d0eb-4e0f-a5db-8f236995bccd&displaylang=en

2-      Configure 172.16.1.1/24 on the External Network with Gateway 172.16.1.254 and 192.168.1.1/24 on the internal Network card with no gateway entry.

Note: Routing table should be consider in Design and Planning phase, as TMG needs to send back the web request to the requester, So it’s need to know how to reach to the requester in case the requester in different VLAN.

3-      Make sure Windows is up to date. Run Windows Update under "%windir%\system32\wuapp.exe"

4-      Start by click Run Preparation Tools as mentioned below:

Note: By running the preparation tool, all required component for TMG will be installed

5-      click Next

6-      First read the agreement and then Click on “I accept the Terms of the license agreement” then click Next

7-      In Installation type, chose “Install Forefront Threat Management Gateway services” to consider this machine as TMG server.

8-      Wait until the configuration finish

9-      Select “Run Microsoft Forefront TMG setup” and then Click Finish

10-   At User Account Control dialog Click Yes to allow the program to change to the computer

11-   Wait until windows installer prepare the setup

12-   Click next

13-   Read the Agreement --> Select "I accept the Terms in the license agreement" --> Click Next

14-   Fill the required information and click next

15-   Chose installation path and client Next

17-   Now add the internal network range, "for  Installation Lab, the internal range is 192.168.1.1"

18-   Make sure to add all internal address, any outside the entry range will consider as external network

19-   Click install button to start the installation

20-   Wait until installation finish

21-   Click Finish to finish the installation

Summary

In above article we went through the installation process for Microsoft Forefront TMG. It is easy and simple as  previous version  of Microsoft ISA. We will going through the configuration in the next article.

Thanks. Amir

For more information about TMG:

http://www.microsoft.com/forefront/threat-management-gateway/en/us/product-details.aspx