Hotfix informationA supported hotfix is available from Microsoft. However, this hotfix is intended to correct only the problem that is described in this article. Apply this hotfix only to systems that are experiencing this specific problem.
If the hotfix is available for download, there is a "Hotfix download available" section at the top of this Knowledge Base article. If this section does not appear, submit a request to Microsoft Customer Service and Support to obtain the hotfix.
Note If additional issues occur or if any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that do not qualify for this specific hotfix. For a complete list of Microsoft Customer Service and Support telephone numbers or to create a separate service request, visit the following Microsoft Web site: Note The "Hotfix download available" form displays the languages for which the hotfix is available. If you do not see your language, it is because a hotfix is not available for that language.
PrerequisitesTo install this update, you must be running Microsoft Forefront Threat Management Gateway (TMG) 2010 Service Pack 1 (SP1). Additionally, you must have Software Update 1 for Forefront TMG 2010 SP1 installed. This Rollup includes all fixes which had been addressed in TMG Software Update 1 Rollup 1 and Rollup 2.
Restart requirementYou do not have to restart the computer after you apply this hotfix.
Hotfix replacement informationThis hotfix does not replace a previously released hotfix.
File informationThe global version of this hotfix has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.
|File name||File version||File size||Date|
This article lists Microsoft Knowledge Base articles that apply to Forefront TMG 2010 SP1. The issues that are described in these articles are resolved in Software Update 1 Rollup 3 for Forefront TMG 2010 SP1.
Issues that are resolved by Software Update 1 Rollup 3
|2501646||FIX: "A security package specific error occurred" error when you run a recurring report on a Forefront TMG 2010 server that is managed by an EMS and that is in a workgroup|
|2502685||FIX: "0xc0360007 (STATUS_IPSEC_CLEAR_TEXT_DROP)" error when you try to access the internal IP address of a Forefront TMG 2010 server through an IPsec site-to-site network|
|2472894||"HTTP/1.1 502 - Error 11 Bad format" error when you access SSL websites that use SAN certificates in Forefront TMG Server 2010 if a non-English version of a Windows operating system is installed|
|2501650||FIX: "Page Cannot Be Displayed" error when you try to access a website that requires a client certificate authentication on a Forefront TMG client in Forefront TMG 2010 if HTTPS Inspection is enabled|
|2501776||FIX: "502 Proxy Error. An attempt was made to load a program with an incorrect format. (11)" error when you try to use a HTTPS URL through Forefront TMG 2010 if HTTPS inspection is enabled|
|2498831||How to configure the "HTTPS inspection caching in a forward proxy scenario" and "HTTPS inspection inclusion list" features in Forefront TMG 2010|
|2498837||An enterprise node is incorrectly added in Forefront TMG MMC after you install Forefront TMG 2010 SP1 Update 1|
|2445386||"Sign in as a Different User" does not work on a SharePoint website that is published by Forefront TMG 2010|
|2498835||PPTP or L2TP/IPsec connection is not reestablished between Forefront TMG 2010 servers|
|2501777||FIX: "502 Proxy Error. An unknown error occurred while processing the certificate. (-2146893017)" error when you try to access a website over HTTPS in Forefront TMG 2010 if HTTPS inspection is enabled|
|2497959||Forefront TMG Firewall service may stop when users run desktop sharing software over HTTPS that is proxied by Forefront TMG 2010|
|2500737||"0xc0040446" or "0xc004041d" error if the primary IP address or DNS address uses 188.8.131.52/16, 184.108.40.206/16, or 220.127.116.11/24 in Forefront TMG 2010|
|2497858||SCOM logs many "Forefront TMG Server - Cache: Current Cache Fetches Average Ms Per Request error" error alerts from TMG Management Pack through Forefront TMG 2010|
|2501755||Mspadmin.exe may crash if you do not use SQL Server Express to log traffic in Forefront TMG 2010|
|2502686||Forefront TMG Firewall service might crash when WP_TRAFFIC tracing is enabled in Forefront TMG 2010|
|2501782||"0xc004039E" error when you use the "Allow user override" setting for a HTTP deny rule in an enterprise policy in Forefront TMG 2010|
|2501780||FIX: Forefront TMG Job Scheduler service (Isasched) stops responding on an array member server that is not a report server in Forefront TMG 2010|