DirectAccess force tunneling - Web proxy (TMG) needs authentication

Hello,

I have deployed a DirectAccess 2012 server using computer certificate authentication. The clients are connecting to corporate resources over the WAN usin DirectAccess. Forced tunneling is a requirement. The DirectAccess is only configured for IPHTTPS using a single NIC behind a firewall.

But there is a TMG web proxy in the corporate network that authenticates users. When these users connect over the Internet using devices that have DirectAccess enabled, they are not able to visit any sites as TMG blocks the connection. In the TMG logs, I see that the reason it is dropping these web connections are because the traffic is coming from an 'anonymous' user as per the logs.

The proxy requires user authentication.

Can someone please advise?

Thanks in advance,

SinghP80