Otdfbt

Would you use "llamarse" for an animal's name?

What is a common way to tell if an academic is "above average," or outstanding in their field? Is their h-index (Hirsh index) one of them?

What to use instead of cling film to wrap pastry

Gerrymandering Puzzle - Rig the Election

Which US defense organization would respond to an invasion like this?

Where to draw the line between quantum mechanics theory and its interpretation(s)?

Why aren't nationalizations in Russia described as socialist?

How do I, as a DM, handle a party that decides to set up an ambush in a dungeon?

Copy previous line to current line from text file

Install LibreOffice-Writer Only not LibreOffice whole package

Javascript - Run my script only if landscape is detected

Why symmetry transformations have to commute with Hamiltonian?

How do I allocate more memory to an app on Sheepshaver running Mac OS 9?

Does expanded replace the romannumeral trick for expansion?

Start job from another SQL server instance

Handling Null values (and equivalents) routinely in Python

Is “snitty” a popular American English term? What is its origin?

Why would a military not separate its forces into different branches?

Has the United States ever had a non-Christian President?

What do I do if my advisor made a mistake?

Do publishers care if submitted work has already been copyrighted?

Is there precedent or are there procedures for a US president refusing to concede to an electoral defeat?

Can you use "едать" and "игрывать" in the present and future tenses?

Are pressure-treated posts that have been submerged for a few days ruined?

Forefront TMG denied connection using HTTPS listener

VPN access configuration with ForeFront TMGHow do I allow access to a service running on a Forefront TMG Server?General Forefront TMG 2010 network / proxy configurationForefront TMG page denied displayAccess FTPS from behind Forefront TMGPublishing Activesync through TMG with client certificates (403.7 Forbidden)Changing Forefront TMG VPN CertificateAsymmetric routing with two ForeFront TMG 2010 firewallsHow to bypass Forefront TMG for downloading from Adobe CloudAllow URL:Port in Forefront TMG

.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;

0

I have configured a web publishing rule to allow access to an internal server over HTTP. When i publish the rule everything works as expected.
When I change the rule to use a HTTPS listener, the rule seems to be ignored and I am getting the default rule applied. This results in:

Denied connection

Log type: firewall service
Status: The policy rules do not allow the user request
Rule: default rule
Source: External
Destination: Local Host (192.168.0.10:443)
Protocol: HTTPS

Everything looks right on the listener.
This setup is a Windows Server 2008 R2 VM on a dual-homed Hyper-V server (and it's a UAG install if that makes a difference).

Any thoughts?

microsoft-ftmg-2010

share|improve this question

edited Dec 16 '13 at 0:41

Mark Henderson♦

61.5k29163248

asked May 12 '13 at 4:04

DonaldinioDonaldinio

10112

• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  192.168.0.10 is TMG's IP or Webserver's IP?
  
  – cuonglm
  May 12 '13 at 13:47
  
  

  
  
  
  

add a comment | 

0

I have configured a web publishing rule to allow access to an internal server over HTTP. When i publish the rule everything works as expected.
When I change the rule to use a HTTPS listener, the rule seems to be ignored and I am getting the default rule applied. This results in:

Denied connection

Log type: firewall service
Status: The policy rules do not allow the user request
Rule: default rule
Source: External
Destination: Local Host (192.168.0.10:443)
Protocol: HTTPS

Everything looks right on the listener.
This setup is a Windows Server 2008 R2 VM on a dual-homed Hyper-V server (and it's a UAG install if that makes a difference).

Any thoughts?

microsoft-ftmg-2010

share|improve this question

edited Dec 16 '13 at 0:41

Mark Henderson♦

61.5k29163248

asked May 12 '13 at 4:04

DonaldinioDonaldinio

10112

• 
  
  
  

  
  

  
  
  
  
  
  

  
  
  192.168.0.10 is TMG's IP or Webserver's IP?
  
  – cuonglm
  May 12 '13 at 13:47
  
  

  
  
  
  

add a comment | 

I have configured a web publishing rule to allow access to an internal server over HTTP. When i publish the rule everything works as expected.
When I change the rule to use a HTTPS listener, the rule seems to be ignored and I am getting the default rule applied. This results in:

Denied connection

Log type: firewall service
Status: The policy rules do not allow the user request
Rule: default rule
Source: External
Destination: Local Host (192.168.0.10:443)
Protocol: HTTPS

Everything looks right on the listener.
This setup is a Windows Server 2008 R2 VM on a dual-homed Hyper-V server (and it's a UAG install if that makes a difference).

Any thoughts?

microsoft-ftmg-2010

share|improve this question

edited Dec 16 '13 at 0:41

Mark Henderson♦

61.5k29163248

asked May 12 '13 at 4:04

DonaldinioDonaldinio

10112

Denied connection

Log type: firewall service
Status: The policy rules do not allow the user request
Rule: default rule
Source: External
Destination: Local Host (192.168.0.10:443)
Protocol: HTTPS

share|improve this question

edited Dec 16 '13 at 0:41

Mark Henderson♦

61.5k29163248

asked May 12 '13 at 4:04

DonaldinioDonaldinio

10112

share|improve this question

edited Dec 16 '13 at 0:41

Mark Henderson♦

61.5k29163248

asked May 12 '13 at 4:04

DonaldinioDonaldinio

10112

edited Dec 16 '13 at 0:41

Mark Henderson♦

61.5k29163248

edited Dec 16 '13 at 0:41

Mark Henderson♦

61.5k29163248

asked May 12 '13 at 4:04

DonaldinioDonaldinio

10112

asked May 12 '13 at 4:04

DonaldinioDonaldinio

10112

1 Answer
1

active

oldest

votes

0

You are attempting to route the traffic to the local host according to that message. By default TMG had a very very restricted list of rules for accessing local host.

I suspect this is wrong - it should be trying to forward to your web server; I suspect while you were in there something happened to the forwarding rule. That, or somehow your web server had ended up on the "local host" network set (although I'm not sure how as it's not normally user modifiable).

share|improve this answer

answered May 12 '13 at 22:37

Mark Henderson♦Mark Henderson

61.5k29163248

add a comment | 

Your Answer

StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "2"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);

else
createEditor();

);

function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);



);

draft saved

draft discarded

Sign up or log in

StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);

Sign up using Google

Sign up using Facebook

Sign up using Email and Password

Post as a guest

Name

Email

Required, but never shown

StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f507030%2fforefront-tmg-denied-connection-using-https-listener%23new-answer', 'question_page');

);

Post as a guest

Name

Email

Required, but never shown

0

You are attempting to route the traffic to the local host according to that message. By default TMG had a very very restricted list of rules for accessing local host.

I suspect this is wrong - it should be trying to forward to your web server; I suspect while you were in there something happened to the forwarding rule. That, or somehow your web server had ended up on the "local host" network set (although I'm not sure how as it's not normally user modifiable).

share|improve this answer

answered May 12 '13 at 22:37

Mark Henderson♦Mark Henderson

61.5k29163248

add a comment | 

0

You are attempting to route the traffic to the local host according to that message. By default TMG had a very very restricted list of rules for accessing local host.

I suspect this is wrong - it should be trying to forward to your web server; I suspect while you were in there something happened to the forwarding rule. That, or somehow your web server had ended up on the "local host" network set (although I'm not sure how as it's not normally user modifiable).

share|improve this answer

answered May 12 '13 at 22:37

Mark Henderson♦Mark Henderson

61.5k29163248

add a comment | 

You are attempting to route the traffic to the local host according to that message. By default TMG had a very very restricted list of rules for accessing local host.

I suspect this is wrong - it should be trying to forward to your web server; I suspect while you were in there something happened to the forwarding rule. That, or somehow your web server had ended up on the "local host" network set (although I'm not sure how as it's not normally user modifiable).

share|improve this answer

answered May 12 '13 at 22:37

Mark Henderson♦Mark Henderson

61.5k29163248

share|improve this answer

answered May 12 '13 at 22:37

Mark Henderson♦Mark Henderson

61.5k29163248

answered May 12 '13 at 22:37

Mark Henderson♦Mark Henderson

61.5k29163248

answered May 12 '13 at 22:37

Mark Henderson♦Mark Henderson

61.5k29163248