Configuring Forefront TMG Client for automatic detection

Updated: February 1, 2011

Applies To: Forefront Threat Management Gateway (TMG)

For ease of deployment, when you configure Forefront TMG Client support on a Forefront TMG network, you can configure the network properties to enable Web browsers on the client computers to use automatic discovery, either by using WPAD or a static configuration script.

These settings are applied when the Forefront TMG Client software is installed on client computers. If you make any changes to the client configuration settings on the Forefront TMG computer, Forefront TMG automatically updates the settings, as follows:

  • Each time the Forefront TMG Client is restarted.

  • Each time you click Detect Now or Test Server on the Settings tab in the Forefront TMG Client management console on the client computer.

  • Every six hours after the last refresh.

Note

Settings are applied to all users on the Forefront TMG Client computer.

Configuring the browser on a Forefront TMG Client computer to use WPAD

  1. In the Forefront TMG Management console, in the tree, click Networking.

  2. In the details pane, click the Networks tab, and then select the applicable network (usually Internal).

  3. On the Tasks tab, click Edit Selected Network.

  4. Ensure that Enable Forefront TMG Client support for this network is selected on the Forefront TMG Client tab, and select Automatically detect settings.

Configuring the browser on a Forefront TMG Client computer to use a static configuration script

  1. In the Forefront TMG Management console, in the tree, click Networking.

  2. In the details pane, click the Networks tab, and then select the applicable network (usually Internal).

  3. On the Tasks tab, click Edit Selected Network.

  4. Ensure that Enable Forefront TMG Client support for this network is selected on the Forefront TMG Client tab, and select Use automatic configuration script.

  5. Select one of the following:

    • Use default URL—Forefront TMG provides a default configuration script at the following location: https://FQDN:8080/array.dll?Get.Routing.Script, where FQDN is the fully qualified domain name of the Forefront TMG computer. This script contains the settings specified on the Web Browser tab of the network properties.

    • Use custom URL—As an alternative to the default script, you can construct your own Proxy Auto-Configuration (PAC) file and place it on a Web server. When the client Web browser looks for the script at the specified URL, the Web server receives the request and returns the custom script to the client.

Concepts

Configuring automatic detection
Configuring client computers