When i open any web site browsing it will be open after 1 minute i do not why.
1)  Domain dc Windows server 2008R2
2)  ADC Windows server 2008R2 + tmg 2010

Log

Denied Connection 7/10/2013 10:37:31 AM
Log type: Firewall service
Status: The action cannot be performed because the session is not authenticated.
Rule: IT LaB
Source: Internal (192.168.10.*:56370)
Destination: External (193.45.10.138:80)
Protocol: BranchCache - Retrieval 

Denied Connection  7/10/2013 10:37:42 AM
Log type: Web Proxy (Forward)
Status: 12209 Forefront TMG requires authorization to fulfill the request. Access to the Web Proxy filter is denied.
Source: Internal (192.168.10.*:56375)
Destination: 192.168.10.*:80
Request: GET http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?c4e2aa8623de33a5
Filter information: Req ID: 17054a30; Compression: client=No, server=No, compress rate=0% decompress rate=0%
Protocol: http 
User: anonymous 

Denied Connection 7/10/2013 10:37:47 AM
Log type: Firewall service
Status: A broadcast packet was dropped by the Forefront TMG policy.
Rule: None - see Result Code
Source: Internal (192.168.10.*:58433)
Destination: External (224.0.0.252:5355)
Protocol: Link-local multicast name resolution

Denied Connection  7/10/2013 10:37:49 AM
Log type: Web Proxy (Forward)
Status: 12209 Forefront TMG requires authorization to fulfill the request. Access to the Web Proxy filter is denied.
Rule: IT LaB
Source: Internal (192.168.10.*:56382)
Destination: External (192.168.10.*:8080)
Request: GET http://evsecure-ocsp.verisign.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBS56bKHAoUD%2BOyl%2B0LhPg9JxyQm4gQUf9Nlp8Ld7LvwMAnzQzn6Aq8zMTMCECxI3ZMN9VmO%2BTyZVHpg7UM%3D
Filter information: Req ID: 17054a51; Compression: client=No, server=No, compress rate=0% decompress rate=0%
Protocol: http 
User: anonymous 

Good day.

As I see in log listing there is some problem in authorization mechanism on TMG.

I recommend you set up on TMG connection verifiers to domain controllers.

Additionally change IT LaB rule setting to give access from special IP addresses not for users and check.

Thank you for reply
but i do not know how to verifier connection to domain Controller kindly give me a step.

Try this http://blogs.msdn.com/b/muaddib/archive/2009/03/29/testing-domain-controller-connectivity-using-portqry.aspx?Redirected=true

If everything will be OK change rule settings.

Arfiquin
No problem Connection verifier from Active Directory Domain contorallers and DNS.

Hi,

make sure that DNS name resolution is working correctly. Please check your TMG configuration against this article:
http://social.technet.microsoft.com/wiki/contents/articles/recommended-network-adapter-configuration-for-forefront-tmg-standard-edition-servers.aspx

this is my Rule sitting plz see and suggest.

Change IT LaB rule condition to All Users.

And check TMG configuration recommended by Marc.Grote

Hi,

i i have done TMG configuration against that article but problem is same .

When i open any web site browsing it will be open after 1 minute i do not why.
plz give me solution.

problem not resolve

Can you provide server configuration, number of concurrent connection, and cache setting in TMG (enabled or not, what kind of disk storage used for cache).

Ultrasurf & freegate proxy software when we use then browsing work very fast but when i am using through tmg 2010 then it is not working fast.

Dear everything is okay problem is not in this area which you ask about me problem in TMG policy because i was using Websense after expire websense license it is work slow.

Probelem has been resolve. Removing the ISAPI Filter Plug-In Applies to

Web Filter v7.6

Web Security v7.6

Removing the ISAPI Filter Plug-In Detailed instructions for removing Websense filtering components are provided in the Removing Components. However, additional steps are required when you remove the ISAPI Filter plug-in from an ISA/TMG machine.

1.	Log on with local administrator privileges.

2.	Choose to uninstall a program:

Windows Server 2003: Go to Windows Control Panel > Add or Remove Programs.

Windows Server 2008 (x64): Go to Windows Control Panel > Control Panel Home > Uninstall a program (under Programs).

3.	Select Websense Web Security / Web Filter, and then click Change/Remove (Windows Server 2003) or Uninstall/Change (Windows Server 2008).

This launches the Websense uninstaller.

4.	On the Remove Components screen, select Filtering Plug-in and any other components to be removed, and then click Next.

5.	When the Stop Microsoft Firewall Service screen appears, stop the Microsoft Firewall service and then click Next.

 

Note  Leave the Websense uninstaller running as you stop theMicrosoft Firewall service, and then return to the uninstaller to continue.

To stop the Firewall service, go to the Windows Services management console (Administrative Tools > Services). Right-click Microsoft Firewall (ISA Server) or Microsoft Forefront TMG Firewall (Forefront TMG), and then select Stop. When the service has stopped, return to the Websense installer and continue the uninstallation process.  

Important  When the Firewall service is stopped, ISA/TMG goes intolockdown mode. Depending on your network configuration, network traffic may be stopped. Typically, the Firewall service must be stopped for only a few minutes.

6.	When the following message appears, start the Firewall service and then click OK:

The Websense ISAPI Filter has been unconfigured, you can now start the Microsoft Firewall Service.  

Note  Leave the Websense uninstaller running as you start the Firewall service, and then return to the uninstaller to continue.

To start the Firewall service, go to the Windows Services management console (Administrative Tools > Services). Right-click Microsoft Firewall (ISA Server) or Microsoft Forefront TMG Firewall (Forefront TMG), and then select Start.

7.	On the Websense Software Removed screen, choose whether you want to restart now or later and then click Done.