Forefront TMG simulation thru vmware

Yes it is.

Up to what extent did you simulate it? does it posible to use the ordinary ADSL line at home to simulate access to internet (block certain websites) thru TMG OR emails if posible

Yes I did and test it to publish exchange services and websits ...

one more thing, I have 3 production ISA server and one TMG server running on VM ( hyperv) for about 2 years without any issue

Hi

Yes you can, now it depends what VMware do you want to use. VMware ESXi is one configuration, Workstation is another configuration.

Jail

@ Bestway and Sulimanw- iam using vmware workstation v7 only.

@ Sulimanw, you said- Yes I did and test it to publish exchange services and websits ...

Can you guide me on how to do this. Appreciated.

Its as same as if you have a physical box.

http://exchangemaster.wordpress.com/2010/04/09/publish-exchange-2010-with-tmg-forefront-threat-management-gateway/

http://www.isaserver.org/tutorials/Publishing-Outlook-Web-Access-Microsoft-Forefront-TMG.html

Hi

With Workstation you need to dedicate one of the Network Adapter to connect to your ADSL Router, to use as a gateway/firewall.

Use the VMware Virutal Network Editor

Jail

Hi Bestway, thank you for your patience to enlighten my ignorance :)

ok. adsl is hacing dynamic public ip.  can i do an actual implementation on my lab network to simulate "real" office setup.

objective:
- to send/ receive maill.
- to access owa.

what do i need to have?
- a registered domain?
- services like no-ip or dyndns because of dynamic ip?
- ssl for owa?

Thank you.

Hi

For NS I use www.zoneedit.com(just put this NS into your register domain) in your  and for the IP yes you can use no-ip.

For my I only use 2 thinks, a registered domain(for my testes I have more than one), zoneedit NS and for the dynamic IP I use in the server the tool DirectUpdate that changes my IP address directly in the zoneedit, when the ADSL ISP change the IP.

With this you can have a mail server and webserver working without any problem. And then the TMG or even ISA Server, configuration is normal as in any physical server.

Hope this can help you

Jail

Hi BestWay,

I registered my own domain in godaddy and use zoneedit name server for my dynamic ip.

but it seems theres an error when i use checkdns.net for my domain (attached pics)

this is what i did:
- purchased domain in godaddy
- register in zoneedit/ create zone
- changed Nameserver in godaddy to use ns4.zoneedit.com and ns19.zoneedit.com
- install DirectUpdate sofware to update the zoneedit record once isp change adsl public ip.
- my VMs can access the internet.

checkdns-error.jpg
ZoneEdit-entry.jpg
DirectUpdate.jpg

Hi

@charles_lawrence I never answer questions that are not related with the initial question(this is EE policy).

But regarding this I give you 1 or 2 comments.

First register the domain in the godaddy
Register in the zoneedit
Use the NS and add into your godaddy domain register

Install DirectUpdate into the server and create a DNS Account that connect to your zoneedit and update the IP into any register (example: mail.domain.com)

Create you zone in the zoneedit(that is your domaini), then create a A record or MX like www.domain.com with your IP, or only domain.com with your server IP.

Then in the directupdate you need to create an DNS account for each & AAAA records, MX records, SRV records, that you created in the zoneedit.

I have 3 zones(domains) in my zoneedit, and on each one I have more than 10 or 20 records created(like mail.domain.com, webmail.domain.com, www.domain.com, subdomain.domain.com) and in DirectUpdate I need to create an DNS account for each record to update the IP for everytime the IP changes.

I see that your domain and NS are all ok. But you need to create a A record, or MX record on the zoneedit.

This is your domain:

Non-authoritative answer:
cbthelpsme.com  nameserver = ns4.zoneedit.com
cbthelpsme.com  nameserver = ns19.zoneedit.com

ns4.zoneedit.com        internet address = 216.98.150.236
ns19.zoneedit.com       internet address = 216.227.210.10

The domain its ok and have a good register on the Internet.

Hope this can help you

Jail

Hi Bestway,

Great! checkdns.net can now resolved my domain. Thank you for your help.

additional for your comments i did "publish" my zone in ZoneEdit and created A and NS record.

Thank you.

For TMG, let me work with my domain first then i will implement TMG in my lab.

Points for you. :)