Essential Business Server and removing/disabling TMG

Hi there,

whilst I was on vacation my collegues did our first EBS install.
According to them it's not possible to disable or remove the TMG server.

Is this true? We use UTM appliances and therefore have no use for TMG.
It just clutters the setup.

Kind regards

TMG is an integral part of EBS and is installed on the Security or Edge
server. You can set the rules for it to be minimally invasive, but removing
it isn't an option.

--
Charlie.
http://msmvps.com/blogs/russel




"Freaky" <> wrote in message
news:...
> Hi there,
>
> whilst I was on vacation my collegues did our first EBS install.
> According to them it's not possible to disable or remove the TMG server.
>
> Is this true? We use UTM appliances and therefore have no use for TMG.
> It just clutters the setup.
>
> Kind regards

Hello Freaky,

First, I want to point out that MS has an EBS newsgroup for EBS questions
that you will probably want to add to your resources if you will be
installing EBS regularly, as it sounds like you will be.

Secondly, TMG is just one part of the larger security server installation in
EBS. All three servers (management, messaging, and security) are required
in EBS so TMG is indeed a part of that installation. With that said,
however, EBS was designed to be very flexible. You can certainly deploy EBS
behind UTM devices without a problem. The security server still fulfills
other non-TMG aspects that still make EBS more efficient, such as splitting
the exchange roles out as exchange 2007 was designed to do....just as an
example.

Here is a good article about deploying EBS behind existing hardware
firewalls and explains a little about the EBS security settings and how they
can be reduced and made more permissive (assuming the edge UTM is handling
the firewall duties) but still keep the other aspects of the security server
in play.

http://blogs.technet.com/essentialbu...ss-server.aspx

-Cliff


"Freaky" <> wrote in message
news:...
> Hi there,
>
> whilst I was on vacation my collegues did our first EBS install.
> According to them it's not possible to disable or remove the TMG server.
>
> Is this true? We use UTM appliances and therefore have no use for TMG.
> It just clutters the setup.
>
> Kind regards

Thanks for the re's. I'll be digging into it and have a look at the
other newsgroup.

On 28-12-09 22:24, Cliff Galiher wrote:
> Hello Freaky,
>
> First, I want to point out that MS has an EBS newsgroup for EBS
> questions that you will probably want to add to your resources if you
> will be installing EBS regularly, as it sounds like you will be.
>
> Secondly, TMG is just one part of the larger security server
> installation in EBS. All three servers (management, messaging, and
> security) are required in EBS so TMG is indeed a part of that
> installation. With that said, however, EBS was designed to be very
> flexible. You can certainly deploy EBS behind UTM devices without a
> problem. The security server still fulfills other non-TMG aspects that
> still make EBS more efficient, such as splitting the exchange roles out
> as exchange 2007 was designed to do....just as an example.
>
> Here is a good article about deploying EBS behind existing hardware
> firewalls and explains a little about the EBS security settings and how
> they can be reduced and made more permissive (assuming the edge UTM is
> handling the firewall duties) but still keep the other aspects of the
> security server in play.
>
> http://blogs.technet.com/essentialbu...ss-server.aspx
>
>
> -Cliff
>
>
> "Freaky" <> wrote in message
> news:...
>> Hi there,
>>
>> whilst I was on vacation my collegues did our first EBS install.
>> According to them it's not possible to disable or remove the TMG server.
>>
>> Is this true? We use UTM appliances and therefore have no use for TMG.
>> It just clutters the setup.
>>
>> Kind regards
>

Hi,

mind telling me what newsgroup that is? Can't seem to find it on this
server.

Have reset all the firewall rules to default and can internet fine. Set
the security level to medium-high, if I have to use it it might as well
do something.

Then disabled NAT, so it just does routing, much easier. All traffic,
except HTTP, seems to come from normal client. I suspect HTTP gets some
kind of proxy treatment as it appears to come from the TMG.

Anyways have issues with mail going out. It seems that the exchange
server has issues delivering it to the edge server as it remains in
queue on the exchange server and never shows up on the edge server.

Recipient filtering isn't working either. It's turned on, but if I
telnet to the edge server and give

rcpt to:

It happily accepts. Relaying is disabled, is
rejected with relaying denied, so that works ok.

Any suggestions?

Kind regards

On 28-12-09 22:24, Cliff Galiher wrote:
>
> First, I want to point out that MS has an EBS newsgroup for EBS
> questions that you will probably want to add to your resources if you
> will be installing EBS regularly, as it sounds like you will be.

MS currently seems to be embracing the trend of private newsgroups to help
reduce spam. So it isn't a usenet group. Go to connect.microsoft.com and
you can sign up for the EBS newsgroup. The website also has instructions on
how to access the newsgroup from an NNTP client.

-Cliff


"Freaky" <> wrote in message
news:...
> Hi,
>
> mind telling me what newsgroup that is? Can't seem to find it on this
> server.
>
> Have reset all the firewall rules to default and can internet fine. Set
> the security level to medium-high, if I have to use it it might as well
> do something.
>
> Then disabled NAT, so it just does routing, much easier. All traffic,
> except HTTP, seems to come from normal client. I suspect HTTP gets some
> kind of proxy treatment as it appears to come from the TMG.
>
> Anyways have issues with mail going out. It seems that the exchange
> server has issues delivering it to the edge server as it remains in
> queue on the exchange server and never shows up on the edge server.
>
> Recipient filtering isn't working either. It's turned on, but if I
> telnet to the edge server and give
>
> rcpt to:
>
> It happily accepts. Relaying is disabled, is
> rejected with relaying denied, so that works ok.
>
> Any suggestions?
>
> Kind regards
>
> On 28-12-09 22:24, Cliff Galiher wrote:
>>
>> First, I want to point out that MS has an EBS newsgroup for EBS
>> questions that you will probably want to add to your resources if you
>> will be installing EBS regularly, as it sounds like you will be.
>
>