1201, 2016

Simplify Forefront TMG Migration By Web Chaining To An Upstream Proxy

Microsoft Forefront TMG’s web filtering capabilities officially ended on 31 December 2015. However, a large portion of Forefront TMG users have not migrated to an alternative platform or are struggling […]

1612, 2015

Finding a Forefront TMG replacement is more urgent than you thought

Microsoft just announced some Further details and guidance regarding discontinuation of TMG Web Protection Services, and it contains some potentially alarming information for those continuing to use Forefront TMG as […]

505, 2015

How To Secure Fastvue TMG Reporter for Private Report Sharing

The new Private Reports feature in Fastvue Reporter (Sophos Reporter 2.0 or TMG Reporter 3.0) enables you to share reports with people in your organization securely, without giving them access […]

505, 2015

Fastvue TMG Reporter v3.0 Out Now!

Finally! Fastvue TMG Reporter v3.0 is now available! Thank you to all beta testers that helped iron out all the issues over the past few months!

New Features:
Fastvue Site Clean (Patent […]

2102, 2015

How to Fix Web Application Proxy and AD FS Certificate Issues (Error Code 0x8007520C)

I recently moved my lab environment from one storage to another, and after moving the files and re-configuring the Hyper-V VMs, I received the following error from my Web Application […]

1202, 2015

Fastvue TMG Reporter 3.0 Beta Now Available

I’m excited to announce that Fastvue TMG Reporter 3.0 Beta is now available to test out!
New Features in Fastvue TMG Reporter 3.0

Fastvue Site Clean.
Private Report Sharing (including Scheduled Private Reports).
Activity […]

710, 2014

Updated Exchange 2013 Forms Based Authentication Templates for TMG

It’s been a year since I created the Exchange 2013 Forms based authentication templates for Forefront TMG.

When they were released, only the main login and logout forms were reworked in the […]

2808, 2014

Understanding Hyper-V Dynamic Memory (Dynamic RAM)

Running resource intensive applications on a virtual machine is a great way to ensure they do not consume more compute resource than is necessary, and the same physical machine can be […]

605, 2014

Forefront TMG HTTPS Inspection Issues with SHA256 / CNG Certificates

I’d like to share an important issue I discovered recently that many Forefront TMG administrators may be experiencing. The problem affects accessing popular HTTPS websites when the Forefront TMG HTTPS […]

505, 2014

How to Enable and Disable SSL / TLS Versions on Forefront TMG

In my previous article What everyone should know about HTTPS, SSL, TLS and Certificates, I covered the basics of cryptography protocols and I touched lightly on the point that SSL and […]

902, 2014

How To Extend Forefront TMG’s Web Protection Services (WPS) After November 30 2012

UPDATE (2016-05-01): Now that Microsoft have officially turned off Web Protection Services, please see our latest article on why Finding a Forefront TMG replacement is more urgent than you thought!
As […]

2701, 2014

How To Extend Forefront TMG’s Web Protection Services (WPS) After November 30 2012

As you probably know, Microsoft stopped selling Forefront TMG as well as its subscription based Web Protection Services in December 2011.

Although you can still purchase Forefront TMG through the OEM […]

1411, 2013

The Ins and Outs of Bi-directional Firewall Rules

When I look at firewalls rule sets maintained by other companies, I often notice the same common mistakes. The one is see most often is potentially the worst. I can […]

1610, 2013

Forefront TMG Forms Based Authentication Template for Exchange 2013 OWA

We've created a new mobile friendly Forefront TMG Forms Based Authentication template in the new Exchange 2013 style. Download it here!
710, 2013

How To Solve “13 The Data Is Invalid” Error in Forefront TMG

Last week we had a problem with one of our customers that was trying to access a new web site recently built and hosted at their cloud provider. When running […]

1809, 2013

Make The World A Better Place with Fastvue and Microsoft Reputation Services (MRS)

Uncle Ben told Peter Parker “With great power comes great responsibility”. With TMG Reporter and Webspy Vantage you gain total visibility of what your users are up to. This allows […]

1608, 2013

How To Recover Forefront TMG From a Corrupt Configuration Database

We all know it is good practice to keep regular Forefront TMG configuration backups as they help you recover your deployment quickly and accurately in case of a failure or […]

1508, 2013

Forefront TMG Configuration Backup Scripts For Standalone and Enterprise Arrays

It is good practice to keep regular backups of your Forefront TMG Configuration files. Even if you have a Forefront TMG Array with the configuration in multiple locations, this simply […]

1508, 2013

Understanding Hyper-V CPU Usage (Physical and Virtual)

The latest version of Fastvue TMG Reporter has some enhancements when it comes to processing multiple reports.  It will now schedule multiple report jobs sequentially based on the amount […]

2407, 2013

Deploying Winfrasoft Forefront TMG Virtual Appliances

I am frequently asked by users of Forefront TMG, how to continue using the product now that Microsoft is no longer selling licences as of January 2013. The most common […]

2606, 2013

Fastvue TMG Reporter Voted Best Reporting Application – ISAServer.org Readers Choice

It’s official! Fastvue TMG Reporter is the best reporting application for Forefront TMG as voted by ISAServer.org readers!

ISAserver.org (http://www.isaserver.org) is the leading Microsoft Forefront TMG / UAG and ISA Server […]

2006, 2013

Monitoring, Alerting and Blocking Countries with Forefront TMG

Recently I posted an article on ISAserver.org on using Forefront Threat Management Gateway (TMG) 2010 to monitor and optionally block network access based on the country/geography of the source or […]

606, 2013

Troubleshooting Forefront TMG Web Proxy Auto Discovery (WPAD) Issues

It was almost 6:00 pm on Friday evening and I was setting my mind on what to do with my weekend when suddenly the phone rings.
“Hey Uilson, please help us! […]

3005, 2013

How to Report on YouTube Activity with Fastvue TMG Reporter

A common concern for network administrators is how to manage traffic to high bandwidth sites. YouTube.com is one specific site that network administrators need to watch closely. The site holds […]

705, 2013

What everyone should know about HTTPS, SSL, TLS and Certificates

Growing concerns about Internet security spurred the development of secure encrypted protocols to deliver web content.  The Secure Sockets Layer Protocol was developed and released by Netscape in 1994, 19 years ago.  SSL […]

2304, 2013

Forefront TMG Tips and Tricks

Richard Hicks is a guy worth listening to when it comes to Forefront TMG. He has been installing, configuring, and managing TMG and its predecessors ISA Server and Proxy Server […]

1104, 2013

TMG Reporter 2.1 Out Now!

After a lengthy beta period, we are happy to announce that Fastvue TMG Reporter 2.1 has been officially released!

TMG Reporter 2.1 features detailed Activity Reports, Scheduled Custom Reports, Comprehensive Filtering […]

2503, 2013

HTTPS Inspection in Forefront TMG – Concerns and Misconceptions

When configuring your Forefront TMG Web Access policy, there is an option to enable HTTPS inspection. In this article, I will aim to clear up some confusion surrounding HTTPS inspection in […]

2103, 2013

How To Purchase Forefront TMG After January 2013

In September 2012, Microsoft announced it was discontinuing its popular Forefront Threat Management Gateway (TMG) edge security product (read the announcement). Although mainstream support will continue through to 2015, all sales […]

203, 2013

Reducing Anonymous (Unauthenticated) Traffic in Forefront TMG

Everyone has seen the Anonymous user in their Forefront TMG Reports. This is because Forefront TMG logs 'anonymous' in the username field for all unauthenticated traffic. We have blogged about the Forefront TMG Anonymous User, and written numerous support articles. But here is the best tip we can give you to reduce unauthenticated traffic in Forefront TMG:
103, 2013

TMG Reporter 2.1 Now Available

We're happy to announce Fastvue TMG Reporter 2.1 Beta is now available! New features include Activity Reports, Custom Report Scheduling, Comprehensive Filtering, Drilldown Reporting, Import from remote SQL Logs, and native support for Windows Server 2012 and Window 8.
1401, 2013

Free Windows Grep for W3C Log Files

The Fastvue Log Grep Utility takes a folder of W3C text logs (or any text files), and produces new files containing only the log lines matching your search criteria. The new files are unaltered in format and structure and retain the original log headers. The Fastvue Log Grep Utility is perfect for cutting down a folder of Forefront TMG or ISA Server W3C text logs to just the information in your search string. You can then import these reduced files into WebSpy Vantage, or any other log analysis app. And it's Free!
1001, 2013

Extending Forefront TMG’s ISP Redundancy Features

Forefront TMG’s ISP redundancy allows you to connect two separate ISP’s as routes out to the Internet. There are two configurations; fail-over or load balanced.

Failover configuration provides a robust Internet connection in the […]

1812, 2012

Reporting on Hostnames with Forefront TMG SecureNAT Clients

Forefront TMG does not log authenticated usernames or site hostnames for SecureNAT Clients. The Top Sites sections in Fastvue TMG Reporter will therefore only show IP addresses for SecureNAT traffic, and the Top Users sections will only show the Anonymous user. Fortunately the site hostname issue can be fixed by applying a hotfix from Microsoft. This enables Forefront TMG to log the hostname with the URL, so that site names can be reported on in Fastvue TMG Reporter.
1311, 2012

Fastvue Acquires WebSpy

Fastvue Inc acquires WebSpy’s product development and distribution business worldwide.

We are very happy to announce that Fastvue has successfully acquired WebSpy, a long time leader in log analysis and reporting […]

611, 2012

Forefront TMG Web Chaining and Reporting

Forefront TMG web chaining is a clever way to allow one Forefront TMG server to pass proxy clients on to another TMG server that has Internet access. However, these scenarios pose a unique challenge for reporting on user activity. This article takes you through configuring a Forefront TMG web chaining environment, and provides some options to overcome the issue they create for reporting on user Internet activity.
3010, 2012

Critical Update for TMG Reporter (

We have recently discovered and fixed an issue with TMG Reporter's data retention policy which, if left un-patched, could result in a loss of imported data. We highly recommend updating your installation of TMG Reporter to avoid losing any historical data that has been imported into TMG Reporter to date.
2510, 2012

Hunting IE6 Zombies with TMG Reporter

Old machines running IE6 with no service packs or security updates are a big security concern. Fortunately you can use TMG Reporter to easily identify and track down old neglected 'zombie' machines that may still be running IE6 and connecting to the internet. Just create an alert, sit back and relax, and wait for the IE6 zombies to come out and play!
2310, 2012

Blocking Sites with Forefront TMG

Fastvue TMG Reporter gives you great insight into what sites are being accessed. Forefront TMG administrators are often surprised to see sites in their reports that they believed were being blocked by their Forefront TMG access rules. By running reports on these sites, they often discover that it is due to an unintended consequence of another access rule that permits traffic for a different situation. I thought it would be useful to review the various methods of site blocking to ensure that your rules are as broad or as specific as they need to be.
1110, 2012

Our Five Most Common Forefront TMG Reporting Questions

From anonymous browsing to 'I didn't visit that site!'. Here are our answers to the five most commonly asked Forefront TMG Reporting questions.
410, 2012

New TMG Reporter Features: Custom Reports, SQL Support and more

Forefront TMG reporting just received a huge upgrade with the new features in the latest Fastvue TMG Reporter release. Custom Reports, SQL Support and more.
310, 2012

Testing and Monitoring Forefront TMG Malware Inspection and Intrusion Prevention (NIS) Systems

By actively monitoring Forefront TMG's Intrusion Prevention and Malware Inspection events, you can identify the source of vulnerabilities and take immediate action. This article explains how to test the intrusion prevention (NIS) system as well as the malware inspection system, and how to monitor and alert on these events.
210, 2012

Hosting Multiple Web Sites On A Single Host with IIS and Forefront TMG

This article describes the different methods of hosting multiple web sites on a single host using Microsoft IIS, and publishing web sites with Forefront TMG
1309, 2012

Mitigate DNS Exploits with Forefront TMG

Etienne Liebetrau takes you through some simple DNS hacking techniques, and explains how Forefront TMG can help protect against DNS exploits.
1209, 2012

Forefront TMG End Of Life and What It Means For TMG Reporter

Today Microsoft announced that they are discontinuing Forefront Threat Management Gateway (TMG). This is only one of the major changes that Microsoft is making to the Forefront product line in […]

409, 2012

Mobile Friendly Forefront TMG Forms Based Authentication Template

Microsoft Forefront TMG 2010’s Web Publishing feature enables you to securely publish internal sites such as Outlook Web Access and SharePoint to the external network. Using Forms Authentication to secure […]

2108, 2012

Block Instant Messaging Traffic Using Forefront TMG’s HTTP Filter

Forefront Threat Management Gateway (TMG) 2010 is a powerful application-layer firewall and web proxy server. TMG also includes advanced web protection technologies for providing essential security for clients accessing resources […]

2108, 2012

Everything You Need To Know About User Agents

Fastvue TMG Reporter provides a Top Applications chart in the Bandwidth Dashboard, which is built using the User Agent field in Forefront TMG’s proxy log file (referred to as ClientAgent […]

1608, 2012

Monitor Bandwidth and Limit Internet Speed in Forefront TMG 2010

Fastvue TMG Reporter is unique in that it allows you to monitor internet usage in real-time. Another great feature is that it allows you to generate longer term internet usage reports. […]

1408, 2012

Deploying TMG Reporter on Virtual Machines and Monitoring Server Performance

Determining the system requirements you need to run TMG Reporter depends largely on the Forefront TMG configuration that you have, the logging method and the volume of log records being […]

2507, 2012

Useful Scripts to Disable Logging for System Policy Rules in Forefront TMG 2010

There are a few reasons you might want to disable logging on a specific system policy rule. Mainly this is to reduce the amount of logged information speeding up not only […]

1707, 2012

How to Configure Forefront TMG Malware Alerts

Malware trends change over time and so do the methods of attack.  Once upon a time the trend was to build a malicious site, jam it full of exploit code […]

1007, 2012

How To Secure And Publish the Fastvue TMG Reporter Web Site

By default, Fastvue TMG Reporter is open and unrestricted for anonymous users to view. For a number of privacy related reasons you might need to restrict access to the site. […]

407, 2012

How Kerberos and CARP Affect Forefront TMG Reporting

When using Kerberos authentication as well as CARP on a TMG array you will notice a certain anomaly in TMG Reporter’s Top Users section.

The cause of the traffic
With Forefront TMG […]

107, 2012

The Microsoft Forefront TMG Firewall service terminated unexpectedly. It has done this

Towards the end of June 2012, we started to see many reports in various forums, LinkedIn Groups, and twitter, about the Forefront TMG Services stopping unexpectedly. These issues had the […]

107, 2012

The Microsoft Forefront TMG Firewall service terminated unexpectedly. It has done this

Towards the end of June 2012, we started to see many reports in various forums, LinkedIn Groups, and twitter, about the Forefront TMG Services stopping unexpectedly. These issues had the […]

2606, 2012

Customizing Website Categories with Forefront TMG URL Filtering

One incredibly handy feature of TMG Reporter is the Productivity classification. This can not only be used to display productivity stats on the dashboard but also in defining alerts.  Fastvue […]

1406, 2012

Reporting on Celestix MSA Threat Management Gateway Appliances

If you are looking for a world class, turn-key edge security solution, you don’t need to look any further than the Celestix MSA Threat Management Gateway appliances.

These appliances run Microsoft […]

1206, 2012

Reporting on Forefront TMG’s Remote SQL Database

Microsoft Forefront TMG 2010 supports a variety of different logging methods, and until now TMG Reporter has supported only the SQL Express and W3C Extended log methods. But we’re pleased to announce support for […]

1206, 2012

Forefront TMG Enterprise Logging with Remote SQL Server

There are several logging options to choose from when configuring Forefront TMG 2010, including the option to log to a remote SQL server. Logging to a remote SQL server historically […]

706, 2012

Tips for Healthy Logging and Reporting in Forefront TMG 2010

With numerous improvements to the logging infrastructure in Forefront TMG 2010, logging is pretty much a “set it and forget it” operation these days. Forefront TMG firewall administrators typically don’t […]

3105, 2012

How to Manage Forefront TMG’s Cache with CacheDir

A couple of days ago I was looking for a tool to exclude a site from being served from Forefront TMG’s cache, and came across CacheDir in the Forefront TMG […]

3005, 2012

Enterprise Reporting Challenges with Forefront TMG 2010

As I outlined in a previous blog post, the native reporting tools included with Forefront TMG 2010 are quite limited. In addition to the shortcomings I mentioned previously, deployments of […]

2405, 2012

Fastvue TMG Reporter’s System Requirements Explained

It may sound strange, but we have designed Fastvue TMG Reporter to be a resource intensive application. We’ve done this so that TMG Reporter imports your logs and produces reports […]

1805, 2012

Logging Improvements in Forefront TMG 2010

One of the areas that improved significantly in Forefront Threat Management Gateway (TMG) 2010 is logging. Sure, it doesn’t get all the attention that TMG’s advanced web protection capabilities do. […]

1005, 2012

Understanding TMG Web Caching Concepts and Architectures

I just stumbled across this very informative dive into the wonderful world of Forefront TMG Caching by Deb Shinder:

Understanding TMG Web Caching Concepts and Architectures.

Hope you find it useful 🙂

(Thanks […]

405, 2012

The Best Forefront TMG Configuration for TMG Reporting

TMG Reporter gets its information through Forefront TMG’s Web Proxy and Firewall Log files. If these logs are lacking information, some sections of TMG Reporter will be blank or simply not […]

1904, 2012

TMG Reporter 2.0 Is Here!

It’s out. It’s here. It’s now! After a very successful beta period, we have officially released TMG Reporter version 2.0!

Thank you for helping us bug fix, fine tune and improve TMG Reporter to what […]

304, 2012

Fastvue TMG Reporter Beta Update

Since our release last week, we have been busily adding the final touches to TMG Reporter 2.0 for the official release this weekend!

Over the past week, we have made the […]

2303, 2012

TMG Reporter Beta Update (

We recently posted an update to TMG Reporter Beta – build Unfortunately it introduced some issues for those that were already using an earlier version of the beta. As […]

2103, 2012

TMG Reporter Beta (Update

Update – We have since released to fix issues that some customers were experiencing with Read about the fixes, and download the latest build.


We have just released a […]

903, 2012

Announcing Fastvue TMG Reporter Version 2.0 Beta

Since the release of Fastvue for TMG version 1.0 back December 2011, we have had an overwhelming amount of positive feedback for our real time dashboard and alerting system for […]

1701, 2012

Discover what is going on in your home network. Simply.

Remember when your home network consisted of a single PC and the internet? Now you have a PC, a macbook, an iPhone, an Android, a Playstation, an Xbox, a Wii, […]

1001, 2012

How to find which Forefront TMG Service Pack is installed

Typically, if you need to discover the version of a piece of software, the convention is to go to Help | About.

Microsoft Forefront TMG is no exception, however TMG […]

1412, 2011

How We Designed The Fastvue Dashboard

About six months ago we embarked on a project to design a real time dashboard that helps network administrators quickly answer the question – What is going on in my […]

2411, 2011

Fastvue for TMG receives Silver Award on ISAServer.org

We are pleased to announce that Fastvue for TMG has received a Silver Award on the premier site for TMG and ISA Server administration, ISAServer.org.

Microsoft MVP Richard Hicks spent some […]

1611, 2011

Installing and Configuring Microsoft Forefront TMG – Videos

I came across a good series of videos that takes you through the entire process of installing and configuring Microsoft Forefront Threat Management Gateway.

Although there is no sound in the […]

1311, 2011

The Truth About the Anonymous User

So you have configured an access rule in Forefront TMG to only allow authenticated traffic, yet you still have the ‘Anonymous’ user showing in your log files and in the […]

1111, 2011

We’ve Launched!!!

Yep that’s right! After a few months in beta and receiving top quality feedback from our committed and ever growing list of beta testers, we’ve finally ripped the ‘Beta’ badge […]

2910, 2011

Tell Us What You Think!

Thank you for your continued support of Fastvue for TMG. We truly appreciate your participation as a beta tester and we are excited to be approaching full release.

We were wondering if […]

2110, 2011

Our Support Center is Live!

With all the great feedback coming in, we realized we needed a central place where beta testers could ask questions, submit feedback and search for answers.

The fastvue.co website is now […]

2010, 2011

New Fastvue for TMG Build Available

Our inaugural product Fastvue for TMG has now been in beta for a few weeks and we are humbled to have already received such a great response from the Forefront […]

1510, 2011

We’ve been fixing things!

Thanks to everyone that have been testing Fastvue for TMG for the past few weeks. The feedback has been overwhelmingly positive and invaluable.

We’ve been releasing new builds almost daily to […]

2609, 2011

Woohoo! Our beta is ready

After many months with our heads buried in code, we’re finally there! (we think!). Our first product Fastvue for TMG is available for download, and we’re looking for beta testers to give it […]

Load More Posts