ASA with Microsoft TMG

[asadhasan]

Hi,

I am working on ASA and TMG proxy server design and need your expert advice. The setup is

                              <TMG>

                                   ||

<Internet><ASA><CORE SW><LAN/WLAN>

                    |

               <DMZ>

I am placing my TMG server in one arm configuration. I have core switch 4507 where I am redirecting the HTTP traffic towards the TMG server. Here, I intorduce the new subnet for TMG inside and TMG outside and another subnet from Core switch to ASA. On ASA I will configure the static NAT for TMG outside. So basically, what I am trying to say is, all the http traffic from LAN/WLAN will be redirected towards the TMG ( PBR at Core) for filtering & policies and translated it to TMG outside and pass through the Core switch again and then to ASA toward the internet.

Please let me know your thoughts.

Thanks,

Asad

[asadhasan]

Appreciate if any expert can help me out with htis design.

Thanks.

[jocamare]

What´s what you need to know from the asa´s perspective?

The description just mentioned traffic flowing across the asa, which depending on the version, means that no configuration need to be applied for that specific traffic.