Enabling connectivity for EdgeSync traffic
Updated: February 1, 2011
Applies To: Forefront Threat Management Gateway (TMG)
This topic explains how to configure Forefront TMG to allow Exchange EdgeSync traffic to replicate directory information to the Edge Transport server role running on Forefront TMG. When the Edge Transport server is subscribed to the Exchange organization, the EdgeSync service uses Secure LDAP port 50636/TCP to synchronize directory information used by the Exchange organization to the Edge Transport server. On Forefront TMG, you can easily allow this traffic by enabling pre-defined system policy rules.
Prerequisites
To enable the Exchange EdgeSync service, you must have a Hub Transport server running Microsoft Exchange 2007 SP2 or Microsoft Exchange 2010.
To enable connectivity for EdgeSync traffic
In the Forefront TMG Management console, in the tree, click the E-Mail Policy node.
In the details pane, click the E-Mail Policy tab.
In the Tasks tab, click Enable Connectivity for EdgeSync Traffic.
If this is the first time you are enabling connectivity for EdgeSync traffic, a dialog box opens asking if you want to enable system policy rules. Click Yes.
Next Steps
Exporting Edge Subscription files
Related Topics
Tasks
Subscribing the Edge Transport Server to the Exchange Organization