There are a lot of things that you need to check out before bring a TMG firewall online for a full production deployment. I’ve run articles on this site in the past showing you a few dozen things that you need to check out right after installation is complete.
Not all of the things I’ve described in the past apply to the TMG firewall, and not all of them are technically required – but it’s a lot better to audit you configuration at the beginning than to have someone else it for you later, only to find out something’s there that was unintended.
I haven’t had a chance to update my post-installation tasks articles for the TMG firewall, but the TMG Firewall Team has put together a list of things you’ll want to check into. While the article has some formatting issues, you’ll be able to get the gist of the message.
Check it out at:
http://blogs.technet.com/isablog/archive/2009/11/22/tmg-post-deployment-checklist.aspx
HTH,
Tom
Thomas W Shinder, MD, MCSE, MVP