ITunes match, Internet Access really needed??!!

Question

iTunes Match says it requires internet access, so what if you live in the city and take the train where there is no internet access, does that mean you can't listen to music?

Answer 1

1. Using the SSL cert in the TMG for external connections, and using HTTP between TMG and SP is perfectly fine (though you should be aware that TMG is being EOL'ed)... it provides SSL offloading. But I'm not sure why you've got an internal self-signed cert,
and why it's in the IIS bindings...
2. If you're expecting INTERNAL users to access SharePoint over HTTPS, then the TMG isn't doing SSL offloading, it's just spending CPU cycles translating between certs for no good reason.
3. Extending the web app should NOT be necessary... this process will create a SECOND IIS site for the SAME content database, but will use the DIFFERENT settings in the web.config (things like authentication, policies, etc)... it generates a LOT more hassle
than it's worth, and is rarely necessary.
Assuming internal users access over HTTP (not HTTPS), ditch the cert on the SP box... confirm that it works as it should internally... TMG keeps the SSL cert, and should map HTTPS external to HTTP internal... and depending whether external and internal users
are hitting SP with the same name (FQDN vs hostname), you may or may not need an AAM - I would recommend FQDN for all cases.
Scott Brickey
MCTS, MCPD, MCITP
www.sbrickey.com
Strategic Data Systems - for all your SharePoint needs