Welcome to the Supportcenter!

Dear Customer, dear Reseller,
it is recommended that you activate existing configuration before installing an UAG Service Pack or Update.
This avoids the problem, that existing Trunks are deleted and UAG Services are not able to start.
More information about installation of a Service Pack can be found here: Microsoft Technet

If you already have the problem that existing Trunks are deleted and Services are not able to start you can use the UAGSchemaUpgradeUtil to upgrade an backup from a previous Service Pack or Upgrade level.
This can be found here: C:\Program Files\Forefront Unified Access Gateway\common\bin\UAGSchemaUpgradeUtil.exe

Dear Customer, Dear Reseller
there is currently an issue when installing UAG SP3 in Evaluation (all Trunks are deleted during Update process) We recommend to pospone an upgrade from UAG to SP3 at the moment. We currently do a deep investigation in this topic. As soon as we have additional Information we will inform you at this site.

Dear Partner, Dear Customer!
You can find our new Release 1.4 installation image for UAG and TMG Appliances in the SupportCenter Download area now! These images should be used for fresh installations, for Appliances already in-use, please update the SecureGUARD Appliance Management to the most recent version 2.0.0.10.

For a detailed changelog please see the Download Info of the according file in the Download Area.

Your SecureGUARD Team

Microsoft released a critical security update for Microsoft Forefront UAG 2010 with SP1 and newer.
We recommend to install this security update on all SecureGUARD UAG Appliances.

More information: Microsoft Knowledgebase
Microsoft Security Bulletin MS12-026

Microsoft released new security bulletins regarding remote code execution and DoS through MS RDP Service. We recommend to install this update on all TMG and UAG Appliances.

More information: Microsoft Technet DoS
Microsoft Technet Remote Code Execution

Dear Customer, Dear Reseller!
A new version of the SecureGUARD Appliance Management System for TMG and UAG has been released. You can find the download in the appropriate category. We recommend to install this update on all SecureGUARD Appliances.

Dear Customer, Dear Reseller!
A update for our SecureGUARD-Installer (Linux Installer and Rescue System) is available for download. The new version 5.5.0.12 includes a critical Fix for the Appliance Series 1000 and 1100 concerning the DriveSnapshot Restore functionality in the SecureGUARD-Installer. The installation on any other supported Appliance is optional.
Please carefully read and follow the download documentation and installation instructions as this is a critical system update and not suitable for all Appliance types.
The Update can be downloaded in the "Hotfixes" section of each system tab.

Your SecureGUARD Team

Microsoft released a new security bulletin regarding remote code execution. We recommend to install this update on all TMG and UAG Appliances.

More information: Microsoft Technet

Dear Customer, Dear Reseller,

The new SecureGUARD Appliance image series R1.3 is now available.
The corresponding installations file (ISO) and the changelog is available in the respective TMG or UAG tab. To install the new image version please follow the steps in the Appliance Update Guide which is available in the Documentation tab.

Your SecureGUARD Support-Team

Dear Partner, Dear Customer,
We've recently discovered an incompatibility between network interface cards and firmware-level power-management features on a certain batch of mainboards. This issue might lead to a irregular loss of one or more network interfaces on the appliance (network interfaces disappear in windows).
We were able to track down this issue to the following list of serial numbers of our appliances (only these Series 200 Appliances might be affected):

W02021688611
W02021688711
W10021689311
W15031691711
W25031692511

A firmware update has been released by SecureGUARD to fix this issue. You can download the hotfix along with a detailed installation guide on our support center (Category UAG2010 and TMG2010 -> Hotfixes). We recommend to install the update as soon as possible if you have a Appliance with the serial number listed above.

your SecureGUARD Support-Team

Dear Partner, Dear Customer,
during our internal tests of Windows Server 2008 R2 Service Pack 1 no problems occour.
We recommend to take a backup of your Appliance before installing the Service Pack.

Dear Customer, Dear Reseller
we recommend to wait with the installation of Service Pack 1 (SP1) for Windows Server 2008 R2. We are currently performing extensive tests to check if any problems are occuring. If any problems occur or if the installation is done without any problems you can find the according message in the Support Center.

Dear Partner, Dear Customer,
There can be problems when manually adding VLAN interfaces. The problems will not occure when using the SecureGUARD Appliance Management System. Generally it is recommended to use the SecureGUARD Appliance Managment System for the basic configuration steps.
For further questions the SecureGUARD Support Team is available for you.

Dear Customer, Dear Reseller, the Forefront Unified Access Gateway (UAG) Service Pack 1 is now available. For the download link, information about the update and installation instructions please visit: Microsoft Download Center - UAG Service Pack 1

Dear Customer, Dear Reseller, the Software Update 1 for Forefront Threat Management Gateway (TMG) Service Pack 1 is now available. For the download link, information about the update and installation instructions please visit: Microsoft Download Center - TMG 2010 SP1 Update 1

Dear Customer, Dear Reseller, the Forefront Unified Access Gateway (UAG) Update 2 is now available. For the download link, information about the update and installation instructions please visit: Microsoft Download Center - UAG Update2

Dear Customer, Dear Reseller, there is currently a compatibility issue when installing TMG SP1, when a Node is connected to an EMS via a S2S-VPN Connection. Microsoft is working on a fix for this problem. Please wait with the installation, until the fix is available.

Dear Customer, Dear Reseller, there is currently a compatibility problem when installing Exchange Server 2010 SP1 on a TMG configured for Mail protection. The TMG Team is working on a Fix for this problem. Please wait with the installation until the Fix is available. We will inform you via our Support Center News section. More information:: Forefront Product Team Blog

Dear Customer, Dear Reseller, the Forefront Threat Management Gateway (TMG) Service Pack 1 is now available. For the download link, information about the update and installation instructions please visit: Microsoft Download Center - TMG Service Pack 1

Dear Customer, Dear Reseller,
The previously mentioned behaviour cannot be reproduced on either SecureGUARD nor Pyramid based Appliances. Due to our lab testing results, we can only assume that this issue is an individual case.
If you expierience - contrary to expectations - similar behaviour on your Appliance, please mail us at support@secureguard.at.

Your SecureGUARD Team

Dear Customer or Reseller,
this behaviour is not reproduceable on SecureGUARD Appliances!

Dear Customer or Reseller,
Due to a compatibility issue between recently published windows updates and our Appliances, we recommend you to not install any windows updates on SecureGUARD and Pyramid Appliances at this time.
The issue is currently under investigation in our lab, at the moment we assume the updates KB978338 and KB979683 as the root cause for this issue. The discovered issue impacts network connectivity on the appliance (might break RDP connectivity to the Appliance or cause overall connectivitiy problems).
We will update the news area as soon as a solution for this issue is available.
Your SecureGUARD Team

Dear Customer or Reseller,
We were able to pin down the issue with windows update and our Appliance Series 800 to one optional driver update ("Intel(R) PRO/1000 PT Dual Port Server Adapter").
If you have installed this update, the MAC address on the Intel Pro/1000 PM adapter of the system cannot be read from the ROM any longer, resulting in an invalid MAC for this NIC (00-00-00-00-00-00) and making the adapter unusable.
If you have installed this update, please mail to support@secureguard.at and we will provide you with an updated driver that will restore functionality. In general, please do not install any driver updates which have not been provided by SecureGUARD.

Dear Customer or Reseller,
Due to a compatibility issue between a recently published windows update and our Appliances, we recommend you to not install any windows updates at this time.
The issue is currently under investigation in our lab and we will post updates in the news area as soon as we've further isolated the problem. The discovered issue impacts network connectivity on NICs of the type "Intel Pro/1000 PM" (installed in Appliance series 800).
Your SecureGUARD Team

Dear Partner, Dear Customer,
Welcome to the new SecureGUARD Support Center. Due to the ever rising demands of our products, we have extended the Support Center for you. Questions and suggestions are welcome, please mail them to support@secureguard.at.

Dear Customer or Reseller,
If you set up your SecureGUARD Appliance to download MS updates either from an internal WSUS server or from the internet we recommend to configure the Update Client in the Appliance with the option "Download updates, but install manually". Available updates will be tested in the SecureGUARD lab, if a problem is detected, SecureGUARD will post an Warning news message here immediately. Furthermore, we recommend that updates are installed with a delay of at leat one week, and before an update is applied, this website should be checked for Update-warnings.
Special care should be taken when installing ISa specific updates: these updates might restart the firewall services, or, when installed unattended, might even trigger a reboot of the appliance. Both can lead to an unaccessible Appliance for the Administrator (an automatically triggered reboot might only stop the terminal services, but might not reboot the appliance).
If you intend to install updates remotely (i.e. through a RDP session), make sure that your client is member of the "Remote Management Computers" ISA computer group. This will allow administrative access to the Appliance, even when the firewall services are stopped (lockdown mode).