Question : How to route private networks through Forefront TMG

I have a MS Forefront TMG server v6.x running on Server 2008.  There is an external subnet configured for internet traffic with a default gateway pointing to the ISP.  There is an internal subnet configured on a 10.x.x.x/16 network.  The server manages client VPN connections for remote users coming in from the Internet, and properly routes them to the 10.x.x.x network.  

I want to statically route a 192.168.0.0/16 subnet to a router on the Internal network, 10.1.1.1, so that VPN users can access this non-connected private subnet.  What configurations have to take place in order to configure and allow traffic coming from the VPN sessions to route traffic destined for the 192.168.0.0/16 subnets through to the 10.1.1.1 router. Remember, the TMG already has a default GW pointed to the public ISP.

Answer : How to route private networks through Forefront TMG

On the ftmg box add the obvious from a cmd prompt. This DOES assume though that your 10.x.x.x/16 is actually 10.1.x.x. If it does not, then give us the proper configuration details that make sense.

route -p add 192.168.0.0 mask 255.255.0.0 10.1.1.1

If they are not already present, you need to add the addresses of 192.168.0.0 - 192.168.255.255 to the internal LAT of the FTMG.