Has anyone here implemented Direct Access 2012?

Spooter

Spooter

Spooter

Associate
Joined
1 Aug 2007
Posts
1,065
Hi all,

I was wondering if we have any members on OCUK who have implemented Direct Access? I have a couple of questions that's all.

Do you have the DA server in the DMZ with one adapter and the other on the local lan?

How are you handling the certificates?
 
Last edited:
Surely you need one leg in the network though to be able to access the network once the connection is established?

And to make the connection you need..

A laptop joined to the domain
User credentials
TPM module
Certificate

And only if you tick all those boxes will you actually create the connection to the DA server?

What ports are you forwarding to the DA server? Is it just 443?
 
Thanks the heads up.

I would want to use the Virtual smart card as a form of Two factor authentication and it prevents the certificate from potentially been moved.

The more I read the more complicated it gets if we want all the bells and whistles.

For a start I would want to use multi-site so that means I need a PKI server after all.

I guess most people cant use Teredo because they implement their DA server behind a NAT device meaning only IPHTTPS can be used. I suppose this saves the need for two public facing IP addresses though.

How are you guys managing certificates?
 
You must log in or register to reply here.
Back
Top Bottom