Hi Kiwisek,
as I posted I put the external nic of my exchange edge into the perimeter network of th TMG. So it is not only protected by the embedded local firewall but also by the TMG.
But I agree, my design is not the solution for all networks. It depends on the special requirements and demands of every single company and must fit them.
Are there any updates from MS support to our problem with TMG??
Best regards
hkillerm