+ Post New Thread
Results 1 to 10 of 10
Windows Server 2008 R2 Thread, Any thought on DirectAccess in 2008R2 in Technical; Just setting up a new 2008R2 server and was just about to install my normal vpn stuff when I noticed ...
  1. #1

    Join Date
    Apr 2010
    Posts
    2,009
    Thank Post
    81
    Thanked 184 Times in 153 Posts
    Rep Power
    68

    Any thought on DirectAccess in 2008R2

    Just setting up a new 2008R2 server and was just about to install my normal vpn stuff when I noticed Direct Access.

    Just wondered if anyone was using this instead off a normal vpn?

  2. #2
    ChrisH's Avatar
    Join Date
    Jun 2005
    Location
    East Lancs
    Posts
    4,996
    Thank Post
    120
    Thanked 280 Times in 258 Posts
    Rep Power
    106
    Two things to note about direct access, you will need all resources to be IPV6 and you can only use it with the top 2 editions of Windows 7 eg Ultimate and Enterprise. Apart from that I like the sound of it.

  3. #3

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    10,991
    Thank Post
    851
    Thanked 2,653 Times in 2,253 Posts
    Blog Entries
    9
    Rep Power
    764
    Looks really good but is apparently difficult to setup, needs internal resources you want to share to be IP6 addressed inside the network and it also requires two sequential external IP4 addresses which is the big hold up in NZ where is is hard enough getting one and impossible to get two without a whole seporate ADSL line.

  4. #4
    jamesfed's Avatar
    Join Date
    Sep 2009
    Location
    Reading
    Posts
    2,185
    Thank Post
    133
    Thanked 340 Times in 287 Posts
    Rep Power
    84
    We took a look at it but our LEA dosn't support IPv6 yet - would love to deploy though.
    In the end we just went with a SSTP VPN, still trying to get my head around the right security cert for it (but hopefuly I've figured it out for tomorrow!).

  5. #5

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    10,991
    Thank Post
    851
    Thanked 2,653 Times in 2,253 Posts
    Blog Entries
    9
    Rep Power
    764
    Quote Originally Posted by jamesfed View Post
    We took a look at it but our LEA dosn't support IPv6 yet - would love to deploy though.
    In the end we just went with a SSTP VPN, still trying to get my head around the right security cert for it (but hopefuly I've figured it out for tomorrow!).
    You don't need IP6 externally, just inside your own network for things like servers that will be accessed remotely which will all usually be in the same segment so even if they control your internal network addressing you can still use IP6 alongside for this purpose.

  6. #6
    jamesfed's Avatar
    Join Date
    Sep 2009
    Location
    Reading
    Posts
    2,185
    Thank Post
    133
    Thanked 340 Times in 287 Posts
    Rep Power
    84
    Quote Originally Posted by SYNACK View Post
    You don't need IP6 externally, just inside your own network for things like servers that will be accessed remotely which will all usually be in the same segment so even if they control your internal network addressing you can still use IP6 alongside for this purpose.
    Its the NIC with a direct connection to the internet and no support for NAT that throws us.

  7. #7

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    10,991
    Thank Post
    851
    Thanked 2,653 Times in 2,253 Posts
    Blog Entries
    9
    Rep Power
    764
    Quote Originally Posted by jamesfed View Post
    Its the NIC with a direct connection to the internet and no support for NAT that throws us.
    Ah, fair enough, I have been thinking of investigating VPN services that could possibly tunnel out via a substandard (New Zealand) internet connection or a massivly restricted one like an LEA one to provide the external IPs. Unfortunatly it would probably break the LEA T&Cs to make stuff work.

  8. #8
    jamesfed's Avatar
    Join Date
    Sep 2009
    Location
    Reading
    Posts
    2,185
    Thank Post
    133
    Thanked 340 Times in 287 Posts
    Rep Power
    84
    Quote Originally Posted by SYNACK View Post
    Ah, fair enough, I have been thinking of investigating VPN services that could possibly tunnel out via a substandard (New Zealand) internet connection or a massivly restricted one like an LEA one to provide the external IPs. Unfortunatly it would probably break the LEA T&Cs to make stuff work.
    SSTP is your thing works over HTTPS so no special ports need opening - its what we are working on at the moment.

  9. #9

    Join Date
    Apr 2010
    Posts
    2,009
    Thank Post
    81
    Thanked 184 Times in 153 Posts
    Rep Power
    68
    Currently I use Openvpn Access Server. It comes in a virtual format so you just dump it on the server. It integrates very well with AD and radius. It Works over HTTPS so no port issues. The users visit the vpn website (in school) login using their normal account and then can either download a connection app that will only work for them or continue to log in. It then maps drives and all utils/printers as though in school. Its a very good solid product, its only down full is you only get 2 free licences but its only a couple of quid to add more.

  10. #10

    Join Date
    Jan 2012
    Location
    Gillingham
    Posts
    27
    Thank Post
    0
    Thanked 3 Times in 3 Posts
    Rep Power
    5

SHARE:
+ Post New Thread

Similar Threads

  1. Saw this and thought of you
    By mrbios in forum Scripts
    Replies: 8
    Last Post: 7th January 2009, 12:36 PM
  2. have you ever given this some thought?
    By alexknight in forum Other Stuff
    Replies: 16
    Last Post: 1st November 2008, 10:51 PM
  3. Just thought you'd like to know.
    By laserblazer in forum General Chat
    Replies: 19
    Last Post: 12th February 2008, 06:14 PM
  4. Just a thought but not sure if its possible ..... ??
    By mac_shinobi in forum How do you do....it?
    Replies: 7
    Last Post: 30th January 2006, 09:05 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •