Step 3: Installing Forefront TMG

Applies To: Windows Server 2008 R2

This topic describes how to install Forefront TMG on your computer in interactive mode. In interactive mode, you monitor the installation process, and enter the required setup information when prompted by the setup process. To run setup in interactive mode, you must be a member of the Administrators group on the local computer.

Before installing Forefront TMG, you must run the Preparation Tool to verify that the applications that are required for the successful installation of Forefront TMG are installed on your computer. If you run Forefront TMG without first running the Preparation Tool, the installation of Forefront TMG will fail if the computer does not include the required applications. These applications vary by installation type.

Important

The Preparation Tool requires an Internet connection to download and install any required applications. For example, if Forefront TMG is on the perimeter side of a proxy server, you might need to configure the proxy settings to enable Forefront TMG server access to the Internet.

To run the Forefront TMG Preparation Tool

  1. Log on to TMG-SRV as CONTOSO\Administrator.

  2. On the task bar, click Windows Explorer, and browse to the Forefront Threat Management Gateway installation media.

  3. Double-click autorun.hta from the Forefront Threat Management Gateway installation media.

  4. In the Open File – Security Warning window, click Run.

  5. On the Microsoft Forefront Threat Management Gateway 2010 installation page, click Run Preparation Tool.

  6. In the Open File – Security Warning window, click Run.

  7. On the Welcome to the Preparation Tool for Microsoft Forefront Threat Management Gateway (TMG) page, click Next.

  8. On the License Agreement page, select I accept the terms of the License Agreements, and then click Next.

  9. On the Installation Type page, verify that Forefront TMG services and Management is selected, and then click Next.

  10. On the Preparing System page, the perquisites for the installation are verified.

  11. On the Preparation Complete page, verify that Launch Forefront TMG Installation Wizard is cleared, and then click Finish.

Next, use the Installation Wizard for Forefront TMG Enterprise to install Forefront TMG on the Forefront TMG server (TMG-SRV).

To Install Forefront TMG

  1. On the Microsoft Forefront Threat Management Gateway 2010 installation page, click Run Installation Wizard.

  2. In the Open File – Security Warning window, click Run.

  3. On the Welcome to the Installation Wizard for Forefront TMG Enterprise page, click Next.

  4. On the License Agreement page, select I accept the terms in the license agreement, and then click Next.

  5. On the Customer Information page, type your user name, organization, and product serial number, and then click Next.

  6. On the Setup Scenarios page, click Next.

  7. On the Installation Path page, verify the installation path, and then click Next.

  8. On the Define Internal Network page, click Add, and then click Add Adapter.

  9. On the Select Network Adapters page, select Local Area Connection, and then click OK.

  10. On the Addresses page, click OK.

  11. On the Define Internal Network page, click Next.

  12. On the Services Warning page, click Next.

  13. On the Ready to Install the Program page, click Install.

  14. On the Installing Forefront TMG page, the installation progress will be noted.

  15. In the Microsoft Forefront TMG Installation Wizard window, the installation progress will be noted.

  16. In the Installation Wizard Complete window, click Finish.

  17. On the Microsoft Forefront Threat Management Gateway 2010 installation page, click Exit.

  18. On the Set Up Windows Internet Explorer 8 page, click Ask me later.

  19. Review the Protect the Forefront TMG Server page, and then close Internet Explorer.

Note

After you restart the Forefront TMG computer or services, the following error message might be displayed:
“Forefront TMG detected Windows Filtering Platform filters that may cause policy conflicts on the server. The following providers may define filters that conflict with Forefront TMG firewall policy: Microsoft Corporation.”
If this message is displayed, disable the alert from appearing again, since it does not indicate a real conflict.

You have installed and configured a Forefront TMG server. Now you can proceed to Step 4: Exporting the SSL Certificate for the RD Gateway Server.