DirectAccess
DirectAccess, also known as Unified Remote Access, is a VPN technology that provides
UNIX and Linux servers through DirectAccess. With Windows Server 2012, DirectAccess is fully integrated into the operating system, providing a user interface to configure and native IPv6 and IPv4 support.[2]
Technology
DirectAccess establishes
DNS64 and NAT64, which allows DirectAccess clients to communicate with servers inside the corporate network even if those servers are only capable of IPv4 networking. Due to the globally routable nature of IPv6, computers on the corporate network can also initiate a connection to DirectAccess clients, which allows them to remotely manage (Manage Out) these clients at any time.[4]
Benefits
DirectAccess can be deployed for multiple sites. It allows for a secure encrypted VPN. This is controlled through Group Policies which allows the administrator to maintain a secure network.
Requirements
DirectAccess With Windows Server 2008 R2 or UAG requires:
- One or more DirectAccess servers running Windows Server 2008 R2 with two network adapters: one that is connected directly to the Internet, and a second that is connected to the intranet.
- On the DirectAccess server, at least two consecutive, public IPv4 addresses assigned to the network adapter that is connected to the Internet.
- DirectAccess clients running Windows 7 "Ultimate" or "Enterprise" editions or Windows 8 "Enterprise" edition clients
- At least one domain controller and Domain Name System (DNS) server running Windows Server 2008 SP2 or Windows Server 2008 R2.
- Public key infrastructure (PKI) to issue computer certificates.
DirectAccess With Windows Server 2012 requires:
- One or more DirectAccess servers running Windows Server 2012 with one or more network adapters.
- At least one domain controller and Domain Name System (DNS) server running Windows Server 2008 SP2 or Windows Server 2008 R2.
- DirectAccess clients running Windows 7 "Ultimate" or "Enterprise" editions or Windows 8 "Enterprise" edition clients
- A Public Key Infrastructure is not required for Windows 8 Clients.[5]
Smart card certificates, and health certificates for Network Access Protection may be used along with PKI.
References
- ^ "Got DirectAccess? Get UAG!". Archived from the original on 2009-07-21. Retrieved 2017-03-23.
- ^ "What's New in DirectAccess in Windows Server". technet.microsoft.com. 31 August 2016. Retrieved 2017-03-23.
- ^ "DirectAccess: Microsoft's Newest VPN Solution - Part 1: Overview of Current Remote Access Solutions - TechGenix". www.windowsecurity.com. Archived from the original on 2013-01-17. Retrieved 2017-03-23.
- ^ "Configuring Manage Out to DirectAccess Clients | PACKT Books". www.packtpub.com. Retrieved 2017-03-23.
- ^ "What's New in DirectAccess in Windows Server". technet.microsoft.com. 31 August 2016. Retrieved 2017-03-23.