Publishing a Pool with Multiple Servers

If the load-balancing capabilities of Threat Management Gateway are used to publish multiple Front End Servers in a pool, use the following steps:

1. Right-click the Firewall Policy, select New, and select Web Publishing Rule.

2. Name the rule descriptively and click Next.

3. Select Allow and click Next.

4. Select Publish a server farm of load balanced Web servers and click Next.

5. Select Use SSL to connect to the published Web server or server farm and click Next.

6. Enter the internal site name and the fully qualified name of the internal pool and click Next.

7. In the Path field, enter a /* to publish all internal paths behind the previously entered site name. Click Next.

8. Click New to create a new web server farm.

9. Name the web server farm and click Next.

10. Click the Add button and enter the name of a Front End Server or IP address if Threat Management Gateway cannot resolve internal DNS. Click OK and repeat for any additional Front End Servers in the pool.

11. Click Next after all servers are defined in the farm, as shown in Figure 6.7.

Figure 6.7 TMG Web Farm Definition

12. In the method used to monitor server farm connectivity, select Establish a TCP connection and enter port 4443. Click Next.

13. Click Finish to complete the web farm creation.

14. Ensure Cookie-based Load Balancing is selected and then click Next.

15. In the Accept requests for selection, leave This domain name selected and enter the public FQDN of the external web services defined in the Topology Builder. Leave the Path field with the /* string and then click Next.

16. In the Web Listener selection box, choose the web listener created in an earlier step and click Next.

17. In the Authentication Delegation method, select No delegation, but client may authenticate directly and click Next.

18. Leave the All Users set in the list and click Next.

19. Click Finish to complete the rule.