Microsoft has released Rollup 2 for Forefront Threat Management Gateway (TMG) 2012 with Service Pack 2, which fixes seven important issues, including a situation where you get an “access denied” error when you use a delegated user account to try to monitor services, another scenario where a TMG server randomly stops processing incoming traffic, and a situation where the Firewall service intermittently crashes when it processes client web proxy requests. Find out about all the fixes and how to get the rollup on Microsoft’s support site:

http://support.microsoft.com/kb/2689195

Get ready to roll – the Microsoft Malware Protection Center has your back. They’re about to release a new antimalware engine on May 15th, as part of the regular update cycle to keep you safe from the latest threats. This affects Microsoft Security Essentials, Forefront Client Security, Forefront Endpoint Protection and Windows Intune Endpoint protection.

You’ll find the official announcement in the TechNet blog:

http://blogs.technet.com/b/enginenotifications/arc...2.aspx

Fastvue has just announced the release of TMG Reporter version 2.0.

TMG Reporter 2.0 is the first real-time reporting application for Microsoft Forefront Threat Management Gateway. It monitors your TMG log files in real-time displaying up to the minute Internet usage and network traffic statistics. New in version 2.0 is the ability to run reports on anything you see in the real time dashboard. You can also schedule Company Overview reports to be emailed to you every day, week or month, and you can run User Investigation reports with a few simple mouse clicks.

TMG Reporter’s seamless Active Directory integration makes user and departmental reporting a breeze. Take the tour or download a free 30 day trial at http://tmgreporter.com

Here’s a good article from Suraj Singh on his ISA Server blog over on TechNet, about a case he worked on where the customer had configured cross site single sign-on but it wasn’t working across two UAG servers between two web sites. He recreated the scenario in the lab and reported here on his findings and the resolution.

http://blogs.technet.com/b/sooraj-sec/archive/2012...s.aspx

Great article by Ben Ari on UAG HAT.

Check it out at:

http://blogs.technet.com/b/ben/archive/2012/04/17/...k.aspx

HTH,

Deb

DEBRA LITTLEJOHN SHINDER
MVP (Enterprise Security)
“MS SECURITY”
dshinder@isaserver.org

Great article on how to configure Windows Server 2012 DirectAccess.

Check it out at:

http://danstoncloud.com/blogs/simplebydesign/archi...l.aspx

HTH,

Deb

DEBRA LITTLEJOHN SHINDER
MVP (Enterprise Security)
“MS SECURITY”
dshinder@isaserver.org

Here’s a great article series on how you can use UAG DirectAccess together with SCCM to monitor your clients around the clock.

Check it out at:

http://www.isaserver.org/tutorials/Configuring-SCC...2.html

Hope you like it

Deb

DEBRA LITTLEJOHN SHINDER
MVP (Enterprise Security)
“MS SECURITY”
dshinder@isaserver.org

“…Microsoft Forefront Unified Access Gateway 2010 (UAG 2010) allows a user to define Inactive session timeout. The Inactive session timeout defines the maximum time a session can be inactive before it times out (see http://technet.microsoft.com/en-us/library/ee406216.aspx). When publishing Microsoft Exchange Outlook Web Access 2010 (OWA 2010) using UAG 2010, the session may stay active even if there is no activity for longer than the value defined in the “Inactive session timeout” field…”

Find out the cause and a solution over at:

http://blogs.technet.com/b/edgeaccessblog/archive/...0.aspx

HTH,

Deb

DEBRA LITTLEJOHN SHINDER
MVP (Enterprise Security)
“MS SECURITY”
dshinder@isaserver.org

Yes – I’ve hit this one many times and didn’t have an explanation for it.

While there are likely many causes for Service Pack 1 update failures, here’s one that actually has a solution:

http://blogs.technet.com/b/edgeaccessblog/archive/...3.aspx

HTH,

Deb

DEBRA LITTLEJOHN SHINDER
MVP (Enterprise Security)
“MS SECURITY”
dshinder@isaserver.org

You might not have heard about it – but there was a security update to fix a potential information disclosure vulnerability in UAG this month.

Check out http://blogs.technet.com/b/edgeaccessblog/archive/...2.aspx for details.

HTH,

Deb

DEBRA LITTLEJOHN SHINDER
MVP (Enterprise Security)
“MS SECURITY”
dshinder@isaserver.org