E-mail policy reapplied every 1-2 minutes - Error 31506 Microsoft Forefront TMG Control

Hi,

yes, it takes two machines, one TMG without "mailprotection" (just TMG, no exchange edge and no forefront) and another with exchange edge and forefront protection, just the same configuration as with ISA-server.

At the first look for small environments it seemed to be a good idea to consolidate "exchange edge" and "forefront for exchange" to TMG to one machine, but I depend on smtp-logs to controll anti-spam behaviour of TMG and so really I cannot use it.

Best regards
hkillerm

I 'sold' the TMG/Exchange/FPE setup to two customers, before I got aware of the problems with this setup. First customer choose for two servers in the DMZ, both with the TMG/Exchange/FPE combination. Just Standard Editions so no array, customer planned on manually keeping the configurations identical. Before building the environment at customer's site I found crashing Exchange and TMG services in my lab, and also saw the issue we are discussing here in this topic.

Still I've built the environment with customer and when we noticed that services were crashing on both identical servers, so we opened a case with PSS. That was 24th of february. Today they are still working on troubleshooting and there's no indication that a solution is available on a short time.

This issue was now delaying the project so we choose to build two seperate servers for both tasks, one with TMG for web publishing and one with Exchange ET role and FPE for spam and virus scanning. We kept the other two servers to allow PSS to continue to investigate.

For the other customer the building of the environment is scheduled within two weeks. If PSS has no fix for the crashing services and event log flooding, then we'll have to seperate the roles for that customer too. Currently I'm not advising my customers to combine TMG, Exchange and FPE.