So I'm working on bringing my company into the 21'st century, with virtual servers, active directory, ADFS, SSO etc. Its a huuuuge project, with a future goal of ISO 27001 cerification.
The current question is, does the Direct Access role offered by Server 2012 perform the same role as Forefront Unified Access Gateway 2010 does?
I'm sure there are many differences, but my primary concerns are Sharepoint publishing, ADFS proxy, reverse proxy, remote connection, and o365 syncronization.
I thought in my own insanity that if I published an IIS 8 web server with websockets through HTTPS there shouldn't be a problem even with the TMG.
However, regardless of publishing, filtering and request settings, I don't see any websocket connection upgrade requests reaching the web server when going through the TMG.
Using SignalR I get fallback to whatever lesser transport the browser in question supports. It works great whenever I bypass the TMG of course.
Do I need to find another firewall / filter to get this to work or is there a way?
I'm having trouble even finding information on what products support web sockets, all I see is that weird quote aboute less than 1% of current proxy servers are incompatible, and using HTTPS should alleviate any problems. And whenever I throw "websocket" into a Google search with a Microsoft product - the result is simply gibberish and/or malware sites.
tl;dr: I realize Windows Server 2012 is still not RTM, but is there a way to establish IIS 8 websocket connections through a TMG 2010 SP2?
I have an issue where I want to strip some image attachments from emails.
Using Forefront for Exchange I can create a file filter rule based on attachment name, type, and size. This initially seemed promising as I could filter all messages of type PNG with a name of image???.png less than 5K in size.
However, the two problems I can’t figure out how to get around are
this rule applies to all messages and I could not figure out how to narrow it down to only specific recipients
it looks like the rule would strip the attachment but then replace it with message text indicating the attachment was striped. I could not find an option to silently strip the attachment.
I've got a fresh install of Server 2008 R2 SP1, Exchange 2010 SP1, and Forefront 2010 Protection for Exchange. All on the same box, Exchange is CAS/Hub/MBS. This is a testing box, looking to evaluate the software configuration.
I've got it running, very default configuration. When I send an e-mail in with a bunch of known spam keywords it correctly delivers to Junk Mail. When I whitelist the sender/domain/IP (even all together) it still gets delivered to Junk Mail. Whilelisting by configuring in FPE -> Policy Mgmt -> Antispam Config -> Content Allow Lists or Filter Lists -> Allowed Sender List.
Mail headers show its being recognized as whitelisted, but still has the SCL score at 9:
X-MS-Exchange-Organization-SCL: 9
X-MS-Exchange-Organization-AuthSource: mailserver.example.com
X-MS-Exchange-Organization-AuthAs: Anonymous
X-MS-Exchange-Organization-Antispam-Report: MessageSecurityAntispamBypass
X-MS-Exchange-Organization-AVStamp-Mailbox: MSFTFF;1;0;0 0 0
Note the MessageSecurityAntispamBypass from being on the Allowed Sender List.
What do I need to change to get FPE/Exchange to deliver whitelisted e-mails to the Inbox?
We currently run pfSense with no problems, however we are looking at TMG as it is included in our partner subscription to MS and allows Windows 7 DirectConnect features to our domain for off-site users.
I have had a google, but there don't seem to be any comparisons of TMG to pfSense.
Anyone have experience/knowledge of this?
Our infrastructure is Windows Server 2008 R2 behind pfSense at the moment.