Forefront TMG 2010 Template not polling

FormerMember

Hi,

I've created the rule as per the documentation for the template but only the monitors for the services are working, none of the Performance Counter Monitors work. However if I use a WMI Monitor to read the same value this works fine.

Is there something I've missed in setting this up? The counters appear to be fine on the server.

Thanks
Jase

Ps. Loving SAM! Health monitoring is awesome! Bye bye HP SIM

aLTeReGo

Getting ForeFront Monitored with SAM or any product for that matter including SCOM is not as simple as it may seem. Below are some instructions that might help.

Allowing ForeFront to be monitored by SAM

 

1.     Edit the registry to match the tree below to define the ports that WMI uses for the server. In this case 3800-3999.

2.     -HKEY_LOCAL_MACHINE
            -Software
                        -Microsoft
                                    -RPC
                                                -Internet
                                                            Ports REG_MULTI_SZ 3800-3999
                                                            PortsInternetAvailable REG_SZ Y
                                                            UseInternetPorts REG_SZ Y

3.     After you have edited the registry, restart the server.

4.     In the Forefront Threat Management Gateway 2010 management console, navigate as follows and ensure the your internal ranges have been defined:

Networking > Internal Network Addresses > Add adapter/private > [Ensure your internal ranges are here]

5.     Adjust the firewall policy to match the tree in the settings below:

Toolbox > Protocols > New "WMI-outbound" > New > TCP/Outbound/3800 to 3999 Next > No > Finish

Tasks > Create Access Rule
"Monitoring" > Allow > Selected Protocols/Add "WMI-Outbound"/NetBIOS Name Service/RPC/RPC Server/NetBIOS Datagram

From/Add "internal" > To/add "all hosts" > all users

 

*the logging details which rules cause your connection failures,  this is the most effective way to figure out what part of your connection was denied and what to modify

ForeFront.jpg