Go Premium for a chance to win a PS4. Enter to Win

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1745
  • Last Modified:

Allow Google Chrome Update on TMG

Hi Experts!

Pls, how do I allow google chrome (googleupdate.exe) to update it self through TMG?

Thx!
0
DELAGIO
Asked:
DELAGIO
  • 12
  • 10
1 Solution
 
als315Commented:
Do you have TMG client installed?
Open logging on TMG, filter it by googleupdate.exe and find rule preventing updating.
0
 
DELAGIOAuthor Commented:
We dont have TMG client on our workstations..

Will try to log it and give you a feedback.
0
 
als315Commented:
If you have authorization on TMG, you had to use TMG client.
0
Cyber Threats to Small Businesses (Part 2)

The evolving cybersecurity landscape presents SMBs with a host of new threats to their clients, their data, and their bottom line. In part 2 of this blog series, learn three quick processes Webroot’s CISO, Gary Hayslip, recommends to help small businesses beat modern threats.

 
DELAGIOAuthor Commented:
If you have authorization on TMG

What do you mean?
0
 
als315Commented:
Are you using anonymous access through TMG or authirization required?
0
 
DELAGIOAuthor Commented:
How do i see that?
0
 
als315Commented:
Look at logging screen (filter by source IP):
http://www.isaserver.org/tutorials/TMG-Back-Basics-Part2.html
0
 
DELAGIOAuthor Commented:
See atachment pls
tmg-google.PNG
0
 
als315Commented:
0
 
DELAGIOAuthor Commented:
Installed already.

Client cannot find tmg, trying to fix it.
0
 
DELAGIOAuthor Commented:
TMG client working.

Still same denied errors.
0
 
als315Commented:
You can add allow rule for anonymous traffic for everyone to domain set tools.google.com
0
 
DELAGIOAuthor Commented:
How do i allow anonymous traffic??
0
 
DELAGIOAuthor Commented:
Well... i am having other problems with other sites, but i don want to install tmg client on all computer of my company.

What should I do?
0
 
als315Commented:
You may have problems when client software (google update, for example) can't use authorization. In this case may be better not to use "Require all users to authenticate". Read these articles:
http://www.isaserver.org/tutorials/Ten-Common-Mistakes-Made-Forefront-Threat-Management-Gateway-TMG-2010-Administrators.html

http://tmgblog.richardhicks.com/2009/01/26/automatic-detection-fails-for-isa-firewall-clients/
0
 
DELAGIOAuthor Commented:
Thhis option is already unmarked.
0
 
als315Commented:
Have you tried to allow traffic to tools.google.com? Anonymous access - All users
0
 
DELAGIOAuthor Commented:
It is kind of working now.


The problem is is taking too long to "verify" chrome version. Without proxy it is very very quick.

Before all changes, it used to take very long time and ended in error. Now after very long time it returns that my version is ok, but logging it still have some denied connections.

I think we are almost there!

I sill didnt understand how do i allow anonymous access! Just grant all users?
0
 
als315Commented:
Yes, to all users. Is it blocked with the same rules as before? Both errors (12209 and 12202)?
0
 
DELAGIOAuthor Commented:
What a strange thing!!! I disabled tmg client, fired up chrome and it was very fast and without errors!!!

Going to do some more tests and give you some feedback!
0
 
als315Commented:
Very good. Usually you should close session before changes will work.
0
 
DELAGIOAuthor Commented:
I dont know what as the exactlly right answer, but now it is working!
0

Featured Post

Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

  • 12
  • 10
Tackle projects and never again get stuck behind a technical roadblock.
Join Now