3cx Authentication TMG 2010

Hi all hope someone can help, I need to get 3cx to either authenticate or by pass proxy for updates

I am getting an authentication error when trying to update the 3cx system software.

remote server returned an error 407 proxy authentication required.

We are using TMG
All telephones work with no problems
I can access the internet on the server
we use virtual servers running vmware vsphere 5.0 esxi

all correct ports are open 


Our Proxy server is 192.168.1.1
our telephone server is 192.168.2.1
connect via a Vlan on 192.168.2.254

Our Proxy server and all other servers are part of domain1
our telephone server is not part of domain1 (stand alone workgroup this was to get around other TMG,3cx issues before virtualisation)

I have run 3cx firewall checker results below

All applications on our 3cx server can can to the web no problems except for the 3cx system when I try to update.



3CX Firewall Checker, v1.0. Copyright (C) 3CX Ltd. All rights reserved.

<08:16:53>: Phase 1, checking servers connection, please wait...
<08:16:53>: Stun Checker service is reachable. Phase 1 check passed.
<08:16:53>: Phase 2a, Check Port Forwarding to UDP SIP port, please wait...
<08:16:54>: UDP SIP Port is set to 5060. Response received WITH TRANSLATION 39213::5060. Phase 2a check passed with WARNINGS. Some functionality will be LIMITED. For more information, please visit 



wireshark shows a get updates from 3cx

then a 407 error

hope some one can help



Baz