Anyone using Microsoft DirectAccess?

[SiD the Turtle]

Anyone out there using this technology to replace VPN? If so care to share any stories on how it went and if it was worth the effort?

Looking at implementing it here, but I can't get my head around how you'd end up with one DA server sitting between the Internet and Intranet infrastructures, i.e. a single point of failure and a pretty critical one at that.

 

[SiD the Turtle]

Cheers guys. I haven't been bothered to read through the planning guide yet so this might be an obvious question but here's our pretty standard, current setup:

Internet -> Router -> Firewall -> Switches -> Servers/Clients

We are talking a requirement for say maybe a dozen remote clients, therefore load balancing might be a bit OTT. In this example would I put in a DA server between the firewall and switches, which would be a single point of failure that would cut off network access both ways in the event of a server crash:

Internet -> Router -> Firewall -> DA Server -> Switches -> Servers/Clients

Or can I split the traffic after it leaves the firewall so that internal clients don't have to go via the DA server to get out to the Internet?