I am currently playing with the Forefront Threat Management Gateway 2010. For now there is only the TMG server (used as gateway) and a client. The client has only a private IP. Now I added another public IP to the TMG server and created a static NAT rule. That is working just fine. At least when testing with whatsmyip.org

Now what about incoming NAT and firewall rules ?
I basically need NAT in both directions .. is this even possible with TMG 2010 ?