To set up your ISA/TMG server to chain with the upstream cloud proxy, follow the instructions below.
Log on to the ISA/TMG server and open the Server Management console.
Under Configuration, open the Networks option and select the Web Chaining tab. Under this tab a default rule is
present. Leave this as it is.
Click the Tasks tab, then click the Create New Web Chaining Rule link to start the wizard.
Give the rule a meaningful name such as Forcepoint Web Security Cloud, and click Next.
In the next section, choose the destinations to which this rule applies (in most cases, it applies to external networks).
Click Add and select the appropriate network.
Click Next to specify how requests are to be handled. This is where you specify that requests be sent to an upstream server (i.e., Forcepoint Web Security
Cloud).
Select Redirect requests to a specified upstream server and click Next.
On the Primary Routing page, specify the address of the Forcepoint Web Security Cloud service: webdefence.global.blackspider.com
Specify port 8081 for both Port and SSL. Click Next.
On the Backup Action page, select the appropriate action for your organization. Your choice depends on whether you are willing to allow requests to be served
directly, without using Forcepoint Web Security Cloud. Click Next.