1. Implementing TMG Server Publishing
6NPS – Session 10

2. Objectives Configuring Server Publishing
Configuring TMG Authentication

3. Class configuration – Using additional switches
Client1
Server1 –
TMG
Internet
DC1
IIS – Web & FTP
RRAS – VPN Connectivity

4. Server Publishing Configuration Options
Server publishing rules configuration:
Action
Traffic
Traffic source
Traffic destination
Networks
Schedule

5. How Server Publishing Works
Media Publishing Rule: Port 1755
mms://media.cohovineyard.com
CohoVineyard Media Site
CohoVineyard FTP Site
TMG
ftp://ftp.cohovineyard.com
FTP Publishing Rule: Port 21

6. How to Configure a Server Publishing Rule
Server Publishing Rule Wizard configuration:
Select server to publish
Select protocol
Select IP addresses where clients will connect

7. How to Publish Media Services
TMG includes protocol definitions and application filters for:
Microsoft Media Streaming protocol (MMS)
Uses either TCP port 80 or TCP and UDP port 1755
Enables access for Windows Media Player client
Progressive Networks protocol (PNM)
Also called RealNetworks Streaming Media protocol
Uses TCP port 7070
Enables access for RealPlayer 5.0 and earlier clients
Real Time Streaming Protocol (RTSP)
Uses port 554 for fast access and port 80 for slower access
Enables access to media created and read with RealSystem G2 tools

8. How to Publish Microsoft SharePoint Portal Server
A portal can present different types of information stored on different servers on the internal network
TMG can securely publish this information to the Internet using:
Web publishing to publish the HTTP and HTTPS content using path mapping and link translation to hide the complexity of the internal network configuration
Flexible authentication to grant only the required level of access
Server publishing to publish services running protocols other than HTTP or HTTPS
SSL bridging and tunneling to secure network traffic on the Internet

9. How to Troubleshoot Web and Server Publishing
To troubleshoot Web and server publishing issues:
Check the resource availability
Check the DNS records
Check the error message
Check which ports the TMGis listening on for connections
Check the publishing rule configuration
Check the SSL configuration and certificates

10. How Authentication and Web Publishing Rules Work Together
TMG uses authentication to grant access to publishing rules:
When the publishing rule specifies a user set other than the All Users group
Based on the Web listener authentication methods specified for a Web publishing or secure Web publishing rule
By processing the firewall rules in order of priority. When a firewall rule matches, but requires authentication, TMG will prompt for user credentials

11. TMG Web Publishing Authentication Scenarios
Web Server authentication
TMG authentication
TMG
TMG and Web server authentication

12. Using RADIUS for Authentication
RADIUS Server
RADIUS Client
TMG
Domain
Controller
Using RADIUS for authentication means that TMG can authenticate users based on their Active Directory credentials without requiring that the computer running TMG be a member of an Active Directory domain

13. How to Implement RADIUS Server for TMG Authentication
To implement RADIUS authentication:
Install and configure IAS to use Active Directory for authentication and configure the TMG as a RADIUS client 1
Configure the Active Directory user accounts or configure remote access policies to enable dial-in access 2
Configure TMG to use the RADIUS server and configure a Web listener to use RADIUS authentication 3

14. Practice: Configuring Server Publishing
Configuring a New Server Publishing Rule
Testing the Server Publishing Rule
Web1
WWW
TMG
Internet
DC1