I answered a question today regarding the fact that when you publish an Exchange server via Forefront TMG and you want to have Form Based Authentication (FBA) for the external users, you have to disable it for the internal users.
Publishing OWA within TMG with FBA requires you to enable Basic Authentication for the owa (Default Web Site) virtual directory in Exchange and disable FBA .
If you don’t do that, when authenticating from outside your network you will be required to authenticate twice, once on TMG and another time on the Exchange Server.
In order to have Form Based Authentication in the same time for your internal and external users you have to create a new web site on the Exchange Server and create a new OWA virtual directory there.
The steps are:
1. Create a new Web site within your IIS management interface

2. Configure the new web site considering the followings:
[Read more of this review]