EnableControlChannelEncryption Property of the IFPCClientConfigSettings Interface

The EnableControlChannelEncryption property gets or sets a Boolean value that indicates whether the Forefront TMG computer can use an encrypted control channel for communicating with Firewall clients.

[C++]

HRESULT put_EnableControlChannelEncryption(
	VARIANT_BOOL fEnableControlChannelEncryption
);
HRESULT get_EnableControlChannelEncryption(
	VARIANT_BOOL* pfEnableControlChannelEncryption
);

Parameters

pfEnableControlChannelEncryption: Pointer to a Boolean variable that is set on return to VARIANT_TRUE if the Forefront TMG computer can use an encrypted control channel for communicating with Firewall clients, or to VARIANT_FALSE if the Forefront TMG computer must use an unencrypted control channel for communicating with Firewall clients.
fEnableControlChannelEncryption: Boolean value that indicates whether the Forefront TMG computer can use an encrypted control channel for communicating with Firewall clients.

Return Value

These property methods return S_OK if the call is successful; otherwise, they return an error code.

[Visual Basic]

Property EnableControlChannelEncryption As Boolean

Property Value

Boolean value that indicates whether the Forefront TMG computer can use an encrypted control channel for communicating with Firewall clients.

Remarks

This property is read/write. Its default value is True (VARIANT_TRUE in C++).

By default, Forefront TMG communicates with Firewall clients running the current version of the Firewall Client software over an encrypted control channel through TCP port 1745. However, Firewall clients running early versions of the Firewall Client software, including Firewall Client for ISA Server 2000 and the Winsock Proxy client (from Microsoft Proxy Server 2.0) and Firewall clients running any version of the Firewall Client software on Windows NT Server 4.0, Windows Millennium Edition, or Windows 98 cannot use an encrypted TCP control channel for communicating with a Forefront TMG computer.

If both this property and the SupportOldFirewallClients property are set to False (VARIANT_FALSE in C++), only Firewall clients that can use a TCP control channel are supported, but no encryption is performed. We recommend using this configuration only for troubleshooting.

This property cannot be accessed through Forefront TMG Management.

Requirements

Client	Requires Windows Vista or Windows XP.
Server	Requires Windows Server 2008.
Version	Requires Forefront Threat Management Gateway (TMG).
IDL	Declared in Msfpccom.idl.
DLL	Requires Msfpccom.dll.