Create Web Listener

The first step in configuring any kind of HTTPS publishing in Threat Management Gateway is to create a web listener. Web listeners are objects that a web publishing rule uses to determine IP addresses and certificates to present to external clients. Web listeners can be created during the Web Publishing Wizard, but if changes are required, the entire wizard must be cancelled. For this reason, create the web listener object in advance of the rule configuration.

1. Open the Forefront TMG Console from the Start menu.

2. Expand the Forefront TMG (<Computer Name>) node and then click Firewall Policy.

3. In the far right pane, click the Toolbox link.

4. In the Network Objects section, right-click Web Listeners and select New web listener.

5. Enter a name for the Web Listener and click Next.

6. Select Require SSL secured connections with clients and click Next.

7. If the Threat Management Gateway publishes only a single public IP address, check the External box. If multiple IP addresses are bound to the server, click Select IP addresses and choose only the IP addresses used by the listener. Click Next.

8. Click the Select certificate button to choose the certificate that the web listener will present to external clients, as shown in Figure 6.5. Click Select and then Next.

Figure 6.5 Certificate and IP Address Selection

9. In the Select how clients will provide credentials to Forefront TMG box, select No authentication and click Next.

10. Click Next because single sign on is not available with this type of authentication.

11. Click Finish to complete the wizard.