TMG Firewall Service Pack 2 Plays Fast and Loose with Rules
Turns out that there might be a bug in the TMG firewall service pack 2 that causes the default Network Rule “Internet Access” to be restored if it was previously deleted. The problem is, it restores it and places it above the custom Network Rule you created to replace it!
Read more about this at:
DEBRA LITTLEJOHN SHINDER
MVP (Enterprise Security)