I did match it all up and still not pinging from my LB Denied Connection Log type: Firewall service Status: The policy rules do not allow the user request. Rule: [Enterprise] Default rule Source: External (10.40.X.8:2048) Destination: Local Host (10.40.X.43) Protocol: PING From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Jerry Young Sent: Wednesday, August 31, 2011 9:31 AM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Re: Can't get Ping to work on my second TMG Enterprise Array setup Eric, Take a look at your network settings on each interface and make sure those match the address ranges on the Network Elements in TMG. On Tue, Aug 30, 2011 at 1:10 AM, Jim Harrison <Jim@xxxxxxxxxxxx> wrote: http://www.ISAserver.org <http://www.isaserver.org/> ------------------------------------------------------- Eric, Make sure you updated the TMG network configuration to match the new TMG installation. This doesn't happen automagically. Jim -----Original Message----- From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Eric Holtzclaw Sent: Monday, August 29, 2011 10:14 AM To: isalist@xxxxxxxxxxxxx Subject: [isalist] Can't get Ping to work on my second TMG Enterprise Array setup http://www.ISAserver.org <http://www.isaserver.org/> ------------------------------------------------------- I have copied my settings from a working TMG Enterprise Array setup, and I can't ping; even though I have so many rules to allow it Logs says Denied Connection TMG1 8/26/2011 1:58:35 PM Log type: Firewall service Status: The policy rules do not allow the user request. Rule: [Enterprise] Default rule Source: External (10.x.4.8:2048) Destination: Local Host (10.x.4.42) Protocol: PING Additional information Number of bytes sent: 0 Number of bytes received: 0 Processing time: 0ms Original Client IP: 10.x.4.8 My managements server Ping is spoofed? Denied Connection TMG03 8/26/2011 4:01:21 PM Log type: Firewall service Status: A packet was dropped because Forefront TMG determined that the source IP address is spoofed. Rule: None - see Result Code Source: Internal (10.x.205.83:2048) Destination: Local Host (10.x.4.42) Protocol: PING ------------------------------------------------------ List Archives: //www.freelists.org/archives/isalist/ ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/ ISA Server Blogs: http://blogs.isaserver.org/ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com <http://www.techgenix.com/> ------------------------------------------------------ To unsubscribe visit http://www.isaserver.org/pages/isalist.asp Report abuse to listadmin@xxxxxxxxxxxxx ------------------------------------------------------ List Archives: //www.freelists.org/archives/isalist/ ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/ ISA Server Blogs: http://blogs.isaserver.org/ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com <http://www.techgenix.com/> ------------------------------------------------------ To unsubscribe visit http://www.isaserver.org/pages/isalist.asp Report abuse to listadmin@xxxxxxxxxxxxx -- Cordially yours, Jerry G. Young II, CISSP Microsoft Certified Systems Engineer Young Consulting & Staffing Services Company - Owner www.youngcss.com <http://www.youngcss.com/>