AnswerGFI WebMonitor implements the following changes within the Microsoft Forefront TMG configuration:
- WebMonitor update servers URL Set is added.
http://*.gfi.com is configured in the WebMonitor update servers URL set. This URL set is used by the GFI WebMonitor Updates Access Firewall Policy.
- GFI WebMonitor Updates Access Firewall Policy is added.
The GFI WebMonitor Updates Access Firewall Policy is configured to allow access from the Local Host to the URLs included in the WebMonitor update servers URL Set. This Firewall Policy applies to All Users by default.
This Firewall policy allows GFI WebMonitor to download Anti-Virus, Anti-phishing and WebGrade database updates from the GFI website.
- GFI WebMonitor GUI Access Firewall Policy is added.
The GFI WebMonitor GUI Access Firewall Policy allows HTTP and HTTPs access from the internal network and the Local Host to the Local Host.
This Firewall Policy is used to allow the Administrator to access the GFI WebMonitor console.
The uninstallation of GFI WebMonitor does not revoke the changes automatically. The changes described in this article are retained in the TMG in case the GFI WebMonitor is reinstalled. The URL Set and the Firewall policies need to be removed manually if the installation of GFI WebMonitor is no longer required.