Suraj Singh's information Security Blog
learn.microsoft.com/en-us/archive/blogs/sooraj-sec
For people who work on information Security.
- Posts
- 112 from 5 Sep 2009 to 20 Feb 2017
- Posting
- archived, read-only
- Kind
- personal blog
- Feed
- https://learn.microsoft.com/en-us/archive/blogs/sooraj-sec/feed.xml
2017 1
2016 4
2015 5
2014 4
2013 15
- FIM : Creating FIM Oracle MA(Management Agent), few important things.
- ActiveSync on some Smartphones(in this scenario Iphones) with client certificate authentication does not work, ActiveSync here is published through TMG
- UAG DA clients not able to connect using IPHTTPS intermittently.
- server hardening :server 2012
- TMG performance issues-another one in that series-maxconcurrentapi
- Delay in loading page of a website published through UAG
- ISA/TMG memory Pool Depletion and performance issues.
- getting error " 502 proxy error. The requested resource is in use. (170)." on the upstream proxy TMG servers
- UAG Form Login SSO - Lessons from field
- Generating netstat output and scenario based tracing using netsh when a specific event occurs in the eventlog-using Powershell
- Getting error- 20152–500 Internal server Error (Data is invalid.) while accessing a web application published through TMG server.
- TMG Reporting- User activity and Monthly recurring reports are blank.
- UAG DA Manage-out another mystery-intranet firewall.
- Outbound Proxy and SecureNAT requests stop working intermittently on TMG 2010. Restarting the Firewall Service seems to resolve the issue temporarily.
- TMG performance counters template and counter Thresholds
2012 9
- UAG DA client cannot connect, Error : ERROR_IPSEC_IKE_AUTH_FAIL in the network captures.
- Presentation on UAG authentication and authorization,with a scenario discussion.
- Data analysis with TMG data packager.
- UAG DA Clients do not connect to the Internal network and on UAG server we get a Getting "A client certificate was not provided" warning
- Threat Management Gateway (TMG) services do not start with event Id 21235 in the event viewer
- Authentication issues on internal machines if external web server has NTLM authentication
- Cross site single sign on not working between two UAG servers
- UAG Network Connector and configuration on Packaged TMG
- CRM published through ISA/TMG : Save and new button on the form does not work properly, need to click twice on the links in the CRM page
2011 22
- Using Eventmon and Nmcap to take network monitor trace when a particular Event is generated.
- Finding Duplicate SPN, for ISA/TMG KCD scenarios
- Failure to add a ISA server 2004/2006 replica Configuration Storage server with error code 0x80072108
- Collecting Data Using Xperf for High CPU utilization of a process
- Access to UAG portal is denied with 403.6 forbidden error
- Accessing Enterprise vault archived emails through UAG
- Site to site IPSEC tunnel betweenTMG 2010 on VMware and Cisco
- Windows update fails with error 80072f8f on TMG server
- WPAD is working or not
- ISA/TMG build numbers
- Configuring custom SSL ports on ISA/TMG server for forward proxy
- Custom scripts -Endpoint detection UAG
- IPsec site to site tunnel between TMG and Cisco fails- another scenario
- Ipsec site to site tunnel between ISA and TMG server Fails with "Peer failed with Windows error 13802(ERROR_IPSEC_IKE_ATTRIB_FAIL)" in IKEext.etl logs
- Mystery of frequent occurence of Event id 14197
- how SSL works a nice link
- Web Proxy client's web access using NTLM authentication
- Network trace sample of web access by a web proxy client using kerberos authentication
- SSLctlidentifier in netsh http add sslcert command mystery
- publishing citrix server(xenapp 5.0) through UAG server-Nice link
- ISA server stops responding the user requests and its required to reboot the ISA server or restart the firewall service.- Scenario2
- Eventid 31212 : ProxyVmemAlloc3pSize registry value calculation
2010 35
- CPU utilization high for ISA Server 2006 with NLB
- Ldp connection to CSS server -domain scenario- A quick walk through
- Isa Server 2006 SP1, 10061 connection refused, the server you are trying to access refused the connection
- Unable to Fail Over from one TMG node to another when using NLB in a Virtual Environment
- UAG: Publish a website using TMG on a UAG server( Although this is not supported but in certain conditions following work around can be considered)
- Publish OWA with TMG -Single NIC configuration
- TMG Reports stop working after installing TMG 2010 SP1
- Getting event ID 36870 every couple of minutes on TMG machines-a discussion
- Server publishing and published server required to be secureNAT Client-a discussion
- Firewall client channel setup-Just before the Data channel setup
- ISA server stops responding the user requests and its required to reboot the ISA server or restart the firewall service.- Scenario1
- HTTP RFC : 2616
- Unable to authenticate using FBA with LDAP on ISA Server 2006
- Firewall client and ISA server -How a data channel is negotiated over Firewall client control channel.
- ISA server does not cache the Response of the web server.
- TMG learning plan
- Ports required Between EMS and nodes :TMG 2010
- TMG SP1 is released
- By pass ISA/TMG server Part 2
- By pass ISA/TMG server- Part1
- Nice link for Memory dumps
- Email Protection in Forefront TMG
- Authentication Delay for sites Published through ISA server 2006 using Forms Based Authentication
- After installation getting error “The Microsoft Forefront TMG services cannot be started. Please try restarting the computer.”
- single adapter ISA server and VPN
- TMG capacity planner Tool
- TMG tools
- 502 proxy error. The request is not supported(50) while accessing websites from the web proxy clients
- Formula for cache drive size
- Migration from ISA server 2006 to TMG 2010
- Data collection in repro mode using ISA data packager
- Instructions for ISA/TMG Data Packager to collect data in repro mode
- site to site ipsec tunnel does not work -Perfect forward secrecy
- Why no new post for three months
- OWA redirect
2009 17
- Address assignment for VPN client access with ISA server 2006
- Password change using Form Based Authentication in ISA server 2006
- Generating Server authentication certificate for domain controller to be used in Ldaps authentication of ISA server
- Pass through authentication on ISA server 2006
- Authentication with ISA server 2006
- OWA publishing using Kerberos Constrained Delegation method for authentication delegation
- Publishing OWA through ISA Server-walk through
- Setting internal network address ranges as per the routing table on the ISA server
- Rolling Back The SCW(Security Configuration Wizard) policy
- Running Security Configuration wizard on ISA server
- Troubleshooting installation issues- ISA server Enterprise Edition -work group- Part3
- Getting error while adding CSS replica "setup failed to install ADAM in replica mode (0x80074e46)"
- Installation issues of different kind..."When ISA server is Part of the domain"
- Troubleshooting Installtion issues of ISA server 2006 in work group Scenario - part2-error code=0x8007003a
- Troubleshooting installation issues of ISA server 2006 in work group Scenario-part1- error code 0x8007203a
- Installation of ISA server 2006 Enterprise edition in work group scenario for a clean install
- Troubleshooting ISA server issues