Redundancy and Automated failover using Forefront TMG 2010 Standard between Production-DR site ?

Posted by Albert Widjaja on Server Fault See other posts from Server Fault or by Albert Widjaja
Published on 2011-03-03T11:57:43Z Indexed on 2011/03/16 8:12 UTC
Read the original article Hit count: 660

Filed under:

isa-2006

|

forefront-2010

|

threat-management-gateway

Hi,

I'm using MS TMG 2010 Standard as my single firewall to publish my Exchange Server and IIS website to the internet, however it is just one VM in the DMZ network with just one network card (vNIC), what sort of redundancy method that is suitable for making this firewall VM redundant / automatically failover in my DR site ?

Because it is very important in the event of disaster recovery all important email through various mobile device will still need to operate and it is impossible if this TMG 2010 VM is offline.

is it by using: 1. Multicast NLB 2. Any other clustering 3. VMware HA / FT (one VM in production, the other VM in DR site with different subnet ?)

Any suggestion and idea willl be appreciated.

Thanks

© Server Fault or respective owner

Related posts about isa-2006

ISP Load Balancing with ISA 2006

as seen on Server Fault - Search for 'Server Fault'
I understand that ISA 2006 has an integrated Network Load Balancing feature. We also recently acquired a second internet line through a second service provider. I know it is possible to purchase a NLB router for using both incoming lines but this is not the route we would like to take if at all… >>> More
ISA 2006 can run on Windows Server 2008?

as seen on Server Fault - Search for 'Server Fault'
ISA 2006 can run on Windows Server 2008 32bits/64bits? >>> More
DotNetOpenAuth OpenID on ISA 2006 Reverse Proxy problem

as seen on Stack Overflow - Search for 'Stack Overflow'
I am trying to host my site that uses DotNetOpenAuth (OpenID) behind ISA 2006 (reverse proxy), and after it authenticated with a provider (such as Google), and it returns with a URL with %253A in the URL. However, ISA HTTP filter rejects the request. What I need to do is, on ISA web publishing rule… >>> More
ISA 2006 refuses VPN DHCP requests as spoofing

as seen on Server Fault - Search for 'Server Fault'
I'm running ISA 2006 with PPTP VPN for my AD-controlled network. DHCP is located on the ISA server itself and authentication is done by RADIUS (NPS) located on the DC. Right now my VPN clients can connect, access local DNS, and can ping ISA, the DC, and other clients. Here's where it gets weird… >>> More
ISA 2006 Ent with NLB configuration

as seen on Server Fault - Search for 'Server Fault'
Hello We have created to virtual machines and installed ISA 2006 Ent and enable NLB configuration, each machine has two NIC one connected to LAN and other connected to DMZ, we are not able to ping DMZ subnet IP of ISA from another machine which is on same DMZ subnet even though we have diable the… >>> More

Related posts about forefront-2010

Forefront 2010 as my firewall solution, suitable?

as seen on Server Fault - Search for 'Server Fault'
Hi, I need to lock down my Windows Server. Is Forefront 2010 ideal for my circumstances? These are: -I am the single user of my server -I RDP from other machines (eg the laptop). -I currently have no solution/using windows firewall (how good is this?). Thanks >>> More
Network outside internal not reaching TMG Forefront 2010 (Hyper-V environment)

as seen on Server Fault - Search for 'Server Fault'
Below is my environment: I have 1 physical machine running Windows 2008 R2, with the Hyper-V role. This machine has 3 physical NICs: One for Internet One for Internal Network One for Wireless Network All 3 have their respective Virtual Networks in Hyper-V, and I have an extra Private virutal… >>> More
Forefront 2010 Antispam vs Exchange 2010 Antispam?

as seen on Server Fault - Search for 'Server Fault'
They look pretty similar, do they work together or independently? For example you have content filtering in Forefront where you can specify SCL barriers, just like in Exchange. However theres no where to specify the Spam mailbox. So will the spam mailbox still be used if I configure this in Forefront… >>> More
Forefront TMG vs pfSense

as seen on Server Fault - Search for 'Server Fault'
We currently run pfSense with no problems, however we are looking at TMG as it is included in our partner subscription to MS and allows Windows 7 DirectConnect features to our domain for off-site users. I have had a google, but there don't seem to be any comparisons of TMG to pfSense. Anyone have… >>> More
Redundancy and Automated failover using Forefront TMG 2010 Standard between Production-DR site ?

as seen on Server Fault - Search for 'Server Fault'
Hi, I'm using MS TMG 2010 Standard as my single firewall to publish my Exchange Server and IIS website to the internet, however it is just one VM in the DMZ network with just one network card (vNIC), what sort of redundancy method that is suitable for making this firewall VM redundant / automatically… >>> More