The TMG Firewall Client will send names for the TMG firewall to resolve on behalf of the client. But what if the client doesn’t need that help, like when it needs to connect to an internal resource? No problem! Configure the Firewall Client to ignore internal names.
Here’s how you do it:
http://technet.microsoft.com/en-us/library/cc441504.aspx
HTH,
Deb