Installing Forefront TMG

Use the following procedure to install Microsoft Forefront Threat Management Gateway.

Running Setup

To run Setup

1. Insert the Forefront TMG CD into the CD drive, or run ISAAutorun.exe from a shared network drive.

2. On the main Setup page, click Install Forefront TMG.

3. On the Setup Scenarios page, select the Forefront TMG services option.

4. On the Internal Network page, click Add, click Add Adapter, and then select the adapter connected to the main corporate network. For more information about defining the Internal network IP address range, see "Adding IP addresses to the Internal network" in this topic.

5. On the final page of the wizard, you can select to open the Forefront TMG management console immediately. The first time that you run the Forefront TMG management console, the Getting Started Wizard starts automatically to allow you to modify IP address settings for your networks, to join the server to a domain or workgroup, and to configure update settings. For more information, see Configuring initial deployment settings.

Adding IP addresses to the Internal network

On the Internal Network page, you can use any of the following methods to add addresses to the Internal network:

• Add Range allows you to add a range of IP addresses. You must specify the beginning and ending IP address in the range, for example, 10.0.0.1 to 10.0.0.255.
• Add Adapter allows you to select a network adapter. The IP addresses that are included in the Internal network are based on the IP address and subnet mask of the selected adapter.
• Add Private allows you to add IP addresses defined as non-routable IP addresses based on Request for Comment (RFC) 1918 and on the Automatic Private IP Addressing (APIPA) feature. For more information about private addresses, see RFC1918 (https://rfc.net/rfc1918.html)and How to use automatic TCP/IP addressing without a DHCP server (https://go.microsoft.com/fwlink/?linkid=51291).

The following table shows IP address ranges based on RFC 1918 or APIPA.