<div>
<div class="content wysiwyg-content">
One of my customer has a very basic setup of network with Win2k8 server with TMG installed, which has two network cards named LAN and WAN. the setup is like this;<br />
<br />
LAN=&gt;TMG=&gt;WAN (Lan IP Range:10.10.10.0 - 255, TMG LAN card IP: 10.10.10.1, TMG WAN card IP: 192.168.1.10, WAN side IP Range: 192.168.1.0-255)<br />
<br />
There is an application server in LAN side (10.10.10.111). Now somebody from WAN subnet (192.168.1.100) wants to connect to an application (could be web-base app, or normal software). So how can I configure policies/rules in TMG to allow this IP number or to an IP Range from WAN side (192.168.1.XXX) to connect to this LAN side app server (10.10.10.111)<br />
<a href="https://filedb.experts-exchange.com/incoming/2012/09_w39/605778/Diagram.pdf.pdf" target="_blank" class="file-inline" title="Basic network diagram (91 KB)"><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 512 512"><path d="M67.508 468.467c-58.005-58.013-58.016-151.92 0-209.943l225.011-225.04c44.643-44.645 117.279-44.645 161.92 0 44.743 44.749 44.753 117.186 0 161.944l-189.465 189.49c-31.41 31.413-82.518 31.412-113.926.001-31.479-31.482-31.49-82.453 0-113.944L311.51 110.491c4.687-4.687 12.286-4.687 16.972 0l16.967 16.971c4.685 4.686 4.685 12.283 0 16.969L184.983 304.917c-12.724 12.724-12.73 33.328 0 46.058 12.696 12.697 33.356 12.699 46.054-.001l189.465-189.489c25.987-25.989 25.994-68.06.001-94.056-25.931-25.934-68.119-25.932-94.049 0l-225.01 225.039c-39.249 39.252-39.258 102.795-.001 142.057 39.285 39.29 102.885 39.287 142.162-.028A739446.174 739446.174 0 0 1 439.497 238.49c4.686-4.687 12.282-4.684 16.969.004l16.967 16.971c4.685 4.686 4.689 12.279.004 16.965a755654.128 755654.128 0 0 0-195.881 195.996c-58.034 58.092-152.004 58.093-210.048.041z"/></svg>Diagram.pdf.pdf</a>
</div>
</div>


Diagram.pdf.pdf

One of my customer has a very basic setup of network with Win2k8 server with TMG installed, which has two network cards named LAN and WAN. the setup is like this;

LAN=>TMG=>WAN (Lan IP Range:10.10.10.0 - 255, TMG LAN card IP: 10.10.10.1, TMG WAN card IP: 192.168.1.10, WAN side IP Range: 192.168.1.0-255)

There is an application server in LAN side (10.10.10.111). Now somebody from WAN subnet (192.168.1.100) wants to connect to an application (could be web-base app, or normal software). So how can I configure policies/rules in TMG to allow this IP number or to an IP Range from WAN side (192.168.1.XXX) to connect to this LAN side app server (10.10.10.111)

Connect from WAN to LAN via TMG

Microsoft Forefront, formerly known as Internet Security and Acceleration Server (ISA Server), is a network router, firewall, antivirus program, VPN server and web cache that runs on Windows servers. It includes identity management and protection systems, and discontinued systems for threat management and network protection, along with protection for Sharepoint and Exchange. The scope of discussions includes forward and reverse proxy, application and service publishing, virtual private networks (VPNs), outbound access rules, SSL certificates and network routing within either a single node or an highly-available array pairing.

Microsoft Forefront ISA Server

The Microsoft Legacy Operating System topic includes legacy versions of Microsoft operating systems prior to Windows 2000: All versions of MS-DOS and other versions developed for specific manufacturers and Windows 3/3.1, Windows 95 and Windows 98, plus any other Windows-related versions, and Windows Mobile.

Microsoft Legacy OS

The Windows operating systems have distinct methodologies for designing and implementing networks, and have specific systems to accomplish various networking processes, such as Exchange for email, Sharepoint for shared files and programs, and IIS for delivery of web pages. Microsoft also produces server technologies for networked database use, security and virtualization.