Solved

TMG ForeFront 2010 Cannot Ping/Be Pinged

Posted on 2013-10-23
4
1,526 Views
Last Modified: 2013-10-30
Hi Experts!
A couple of days ago, during a windows update, our TMG 2010 server froze trying to install service pack 1.  So we aborted the install (and in Windows updates it shows as "failed").  At the same time, we lost all connectivity to the internet.
Having reset a number of things, even to the point of re-entering the static routes, we still cannot get TMG to play on the network.
The TMG server sits in it's own IP range, and in it's own VLAN.  It is a physical server, with an NIC for the internal network, and a NIC for the external network (which connects into a CISCO router provided by Virgin Media).
The network consists of a number of VLANS (10 for servers, 50,51,52 for the 3 floors of the building, 100 for the border LAN).  Whilst I can ping the TMG server from the VLAN 50 for example, I cannot ping it from VLAN 10.  The TMG server cannot ping any IP address either.
We've not changed any configuration of the VLANs, so I am at a loss to understand why all of a sudden TMG has gone wayward.  More to the point, how to fix it.
Any ideas?
Thanks
0
Comment
Question by:DJP1969
  • 2
4 Comments
 
LVL 18

Expert Comment

by:irweazelwallis
ID: 39598896
Sorry if you have already covered these checks but..

External facing NIC - Default  Gateway, no DnS
Internal Facing NIC - no default gateway, no DNS, different Subnet to the External NIC

Depending on the Subnet configuration of the rest of your network a static route will be needed. these routes must be attached to the specific interface for the internal network
i.e.

route add 1.1.1.0 mask 255.255.255.0 1.1.1.1 if 12 -p

once this is setup you'll need to check the network sets in TMG
the internal network needs to contain all of the internal network subnets excluding the external NIC

if you have checked through this then use the TMG logging tool to check and see whats happens to the ping when you send it
0
 
LVL 25

Expert Comment

by:RobMobility
ID: 39599075
After adding static routes, have you added the sinners to the relevant networks? They might all be being treated as external?

Are your network policies configure correctly for route/NAT etc?

What do the logs tell you?
0
 

Accepted Solution

by:
DJP1969 earned 0 total points
ID: 39600271
It appears that in the end the root cause of the problem was the failed update to SP1 for TMG.  It obviously left something unfinished, as by reapplying the SP1 update manually, the serve came back up.
Thanks for the suggestions though.
0
 

Author Closing Comment

by:DJP1969
ID: 39611012
Issue was due to incomplete processing of the TMG 2010 SP1
0

Featured Post

The Eight Noble Truths of Backup and Recovery

How can IT departments tackle the challenges of a Big Data world? This white paper provides a roadmap to success and helps companies ensure that all their data is safe and secure, no matter if it resides on-premise with physical or virtual machines or in the cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

A procedure for exporting installed hotfix details of remote computers using powershell
This article explains how to install and use the NTBackup utility that comes with Windows Server.
This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…
This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility. Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. The…

713 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question