Good question. In order to perform Enhanced Malware Protection the TMG firewall needs to be able to examine entire files to determine if they are good or bad. However, different file types need to be examined in different ways, especially when the file type might include streaming.
Fast or Standard trickling – you can choose which one to prefer, but you might want to stay with the default settings, and this is definitely the case if you don’t understand the trickling methods used by the TMG firewall.
To learn more about Fast and Standard trickling, check out this great article on the TMG Firewall Team blog over at:
DEBRA LITTLEJOHN SHINDER
MVP (Enterprise Security)