|
 |
|
|
Published |
: |
June 26, 2009 |
Last Updated |
: |
June 26, 2009 |
|
|
|
Introduction |
Forefront Threat
Management gateway Beta 3 is feature complete, and planned to be the third
and final planned beta, according to the Forefront TMG
Team. In this article, I will be
installing Forefront TMG Beta 3 using its new enhanced
Installation Wizard, showing to you how the new
preparation tool makes the installation of TMG Beta 3
much easier than it used to be with previous versions.
|
|
|
You can download Forefront Threat
Management Gateway Beta 3 from
here
From the download page, you will
notice that Forefront Threat Management Gateway Beta 3
is now available in two versions, Standard and
Enterprise Edition. With TMG Beta 2, there was only one
executable file.
In this article, I will be
installing Forefront TMG Standard Edition
(TMGBETA3_EN_SE_AMD64.exe)
System Requirements:
-
A computer with a 64-bit
processor.
-
Windows ServerĀ® 2008 64-bit
operating system. You cannot install Forefront TMG
on 32-bit versions of Windows Server 2008. Only
Forefront TMG Management Console (MMC) can be
installed on a 32bit machine, so that you can
connect remotely using the MMC to the Forefront TMG
Server.
-
4 gigabytes (GB) or more of
memory
-
One local hard disk partition
that is formatted with the NTFS file system.
-
2.5 GB of available hard disk
space. This is exclusive of hard disk space that you
want to use for caching or for temporarily storing
files during malware inspection.
-
One network adapter that is
compatible with the computer's operating system, for
communication with the Internal network. An additional network adapter
for each network connected to the Forefront TMG
computer.
Before installing TMG Beta 3, make
sure to read the
Release
Notes for Forefront Threat Management Gateway Beta 3.
Installing TMG Beta 3
I have already setup the server with
two network cards. The first is called Internal
NIC and is connected to the Internal Network,
whereas the second network card is called
External NIC and is connected to the ISP Router
( External Network ). Read this article to know more
about how you can correctly configure your TMG Network
cards :
Configuring ISA Server Interface Settings
- I have downloaded Forefront
Threat Management Gateway Standard Edition (TMGBETA3_EN_SE_AMD64.exe),
and saved it on the Desktop.

Double click on the setup file that you have
downloaded,
if you
have User Account Control
enabled, it
will prompt you to take action, click on
Continue

- On the Welcome to the
Install Shield Wizard page, click on
Next

- Select the path where the
extracted files will be stored

You can either keep the default path or change it to
a custom path by clicking on the
Change... button, browse and select
another path. Then click Next

extracting the setup package will start


- Once setup files extraction is
completed, the main Forefront TMG menu page will
open, where it is divided into three sections :
- Before you Start
: This section helps you in identifying the
hardware and software requirements, reading the
deployment guide and the release notes for TMG beta
3.
- Prepare and Install : It allows
you to run Windows Update and download/install
Windows update. The Preparation Tool is a new tool
introduced with Beta 3 and was not available with
TMG Beta 2. It automatically checks what are all the
required prerequisites/components and
download/install them on your behalf. This is a
great improvement to the installation wizard.
Previously with Beta 2, you had to install all
prerequisites manually and missing any of them would
result in the failure of installing TMG Beta2.
The
Install Forefront TMG option launches the
preparation tools as well and then starts the
installation of Forefront TMG.
- Additional options :
Includes a
link to Forefront TMG website, and also an option to
install Forefront Security for Exchange (Beta 2).

-
From the Prepare and
Install section, you
can:
Run Windows
Update and
install the latest
Windows Updates. In this
step, you can install
.NET Framework 3.5 SP1
which is considered to
be one of the
prerequisites that the
preparation tool will
check for.
Although its not
recommended, you can skip running windows
update and run the
Preparation Tool,
it will check if the
required components are
already installed, if
not yet installed, the
preparation tool will
try to download and
install them, these
prerequisites/components are :
- Windows Roles & Features
- Microsoft .NET Framework 3.5 SP1
- Microsoft Windows Installer 4.5
- Windows Web Services API
Or directly click on Install Forefront TMG,
which will also will run the preparation tool and
then gives you the options to install Forefront TMG
(if no reboot is required after installing the
components required by the preparation tool)
Click on Install Forefront TMG, If you have
User
Account Control enabled, then you might receive the
below message box, click
Continue

- The Welcome to the Preparation Tool
wizard page will open , click Next

- Accept the terms of the License Agreement(s) and
click Next

- Select the first installation option,
Install Forefront Threat Management Gateway service,
and then click Next
You can choose the second option, if you
already have installed Forefront TMG on another
server, and now you want to install Forefront TMG
remote management console to connect to the server
remotely. The third option, Install Enterprise
management Server, is grayed out, because we are
installing Forefront TMG Standard Edition. If you
are installing Forefront TMG Enterprise Edition,
then this option will not be grayed out.

- The preparation tool will start checking what
prerequisites are already installed on your machine,
it will also try to download and then install/configure the required components.

- The preparation tool will start with the Windows
Roles and Features, if any of these roles or
features were
installed previously then the preparation tool will
start checking for next required components. My
server has nothing installed on it except windows
updates. The preparation tool will install and
configure the following Windows Role and Features:
Two Windows Roles:

Six Windows Features:


- The next required component is .NET Framework 3.5
SP1, but as I have already run Windows Update and
installed the listed available Windows Updates ( one
of these updates were .NET Framework 2.5 SP1 ), then .NET Framework 3.5
SP1 was found by the preparation tool to be already
installed.
Be informed that if .NET
Framework 3.5 SP1 is not installed, the preparation
tool will try to download it and then install it, so
make sure that your machine is able to connect to
the internet.

If TMG machine is not connected to the internet at
the time of installing TMG Beta 3, and .NET
Framework 3.5 SP1 was not installed previously, you will receive
an error illustrating to you that the preparation
tool was not able to download .NET Framework 3.5 SP1
and to check your internet connection as shown below

If your server is not connected to the internet at
the time of installing TMG Beta 3, then make sure to
download .NET Framework 3.5 SP1 from another
machine, and then install it on the TMG Beta 3
server. You can download it from
here.
- Then Windows Web Services API will be installed

- Then the preparation tool will check for Windows
Installer 4.5, if it was not found to be installed,
the preparation tool will download it from the
internet and then start to
install it


Reminder : The Same error
page you will receive if your server is not
connected to the internet at the time of
installation and you do not have Microsoft Windows
Installer 4.5 installed. You can download it from
here.

- Once the preparation tools finishes downloading
and installing the required components, you might
need to restart your machine to complete the
installation. Click Restart
to reboot your machine. Once the server is rebooted,
resume TMG installation by running
autorun.hta again and then click on
Install Forefront TMG

If you already had some or
all of the required components and your server
didn't require a reboot, then the preparation tool
will display the completion result of checking all
components, it will give you also the option to
launch TMG setup. Click on Finish

If you have User Account Control enabled, click on
Continue

- Microsoft Forefront TMG Installer will start

On the Welcome to the Installation Wizard
page, click Next

- On the License Agreement page,
accept the terms in the license agreement, and then click
Next

- On the Customer Information
page, enter your details ,
username and organization name, and as you notice,
the product serial number is already filled as this
is a beta build of the product. Then click
Next

- On the
Installation Path page, as you will
notice, the path is C:\Program
Files\Microsoft ISA Server\ , I believe this
will be changed to refer to Forefront TMG once the
product is RTM. You can either keep the default
installation path, or change it by clicking on the
Change... button and browse to the custom path. then
Click Next

- On the Internal Network page,
specify the address range(s) you want to include in
TMG Internal Network, click on the Add...
button

Click on Add Range, type the
address range then click OK

If you have another Internal Network Address range,
then click on Add Range again and repeat the above
steps, else click on OK

You will return back to the Internal Network
page, if you need to change anything click on
Change.., else click on
Next to proceed with the installation
wizard

- Few services will be
restarted or stopped as shown on the
Services Warning page, click Next

- On the Ready to
Install page, click Install

Installing TMG will begin





Eventually, Forefront TMG installation will
be completed, you can enable the checkbox at the
bottom of the page to invoke Forefront TMG
management when the wizard closes. Click
Finish

Once you click Finish, a webpage will open, that
includes some recommendations and information that
you can follow.

- To Open Forefront TMG ,
click Start > All Programs > Microsoft
Forefront TMG > Forefront TMG Management

If you have User Account Control enabled, then click
on Continue

- Forefront TMG management
console will open, and the first thing that you will
notice is the Getting Started Wizard,
which I would like to cover in a future article.

Start exploring Forefront TMG Beta 3 and enjoy
it....
One last reminder is that although Forefront TMG
Beta 3 is feature complete, it is still a Beta
version, so do not install it in a production
environment.
Summary
Forefront Threat Management Gateway Beta 3 installation
is much easier than previous Beta versions. The
Preparation Tool is a new tool included in the
installation wizard that will automatically downloads
and install any required component. Its is recommended
to run the Windows Update option first before installing
TMG, so that you install all critical required updates
for your Windows, then either click on run the
preparation tool or Install Forefront TMG option, which
will also run the preparation tool to check for all
required components, and will try to download and
install any required component.
Related Links
Forefront TMG Beta 3 is
Released
Release
Notes for Forefront Threat Management Gateway Beta 3
Configuring ISA Server
Interface Settings
Back to top
|
|
|
|
|
|
|