DOCSLIB.ORG

Intel Ethernet Server Adapters and Microsoft Windows Server 2008

Total Page：16

File Type：pdf, Size：1020Kb

Download full-text PDF Read full-text
Intel Ethernet Server Adapters and Microsoft Windows Server 2008 Technical.white paper. IP.Security.features. Intel®.Ethernet.Server.Adapters.and. Microsoft®.windows.Server®.2008 TablE.Of contents Network security is an increasingly crucial issue for network administrators. Attacks from outside – and from within the data-center network – must be thwarted Introduction................................ 2 to protect service levels, prevent loss of intellectual property, avoid theft of sensi- The.Basics.of.IPsec..................... 3 tive client data, meet regulatory compliance, and mitigate corporate liability. Internet Protocol Security (IPsec) provides network administrators with a suite Server.and.Domain.. Isolation.(S&DI).......................... 4 of tools to create a robust defense against network attacks from any source. Network.Access.. This white paper provides an introductory overview of IPsec as implemented in Protection.(NAP)........................ 6 Microsoft® Windows Server® 2008. Additionally, the role of new-generation Intel® DirectAccess (DA) ................................9 Ethernet Server Adapters and Ethernet controllers is discussed in terms of how they offload IPsec processing onto silicon to enhance security while maintaining The Challenges with VPNs ...................9 line-rate network throughput. Intel®.Ethernet.Server.Adapters.. with.IPsec.Offload...................... 10 Conclusion................................. 12 For More Information ...........................12 Technical White paper IP Security Features – Intel® EThErNET SErver AdapterS and MicroSoft® Windows SErver® 2008 Introduction IPsec provides the ability to Attacks on networks – both from outside and from within the network – continue to be a challenge for network admin- implement customizable security for istrators and a potentially costly liability for enterprises. protecting communication among Malicious attacks, such as viruses and Denial of Service and between workgroups, local area (DoS), cause loss of time and business and require use of valuable resources to resolve. Data theft, especially confi- network (lAN) computers, domain dential client or customer information, can cause loss of clients and servers, branch offices, customer trust at minimum and may cost millions of dollars extranets, and roving clients. in legal fees and restitution should a class-action suit arise. Equally troubling are recent estimates that now place the number of attacks from within networks as high as eighty Microsoft® Windows Server® 2008 contains a robust imple- percent of all successful attacks on corporate networks. mentation of IPsec that does not require any hardware or These attacks can come from employees, on-site contractors, software upgrades to make IPsec work end-to-end. This consultants, anyone with access to the corporate network. gives network managers a powerful and cost-effective Considering the potential for loss from data theft – whether suite of tools for implementing network security, including it be loss of market advantage or liability for identity theft – capabilities for server and domain isolation (S&DI) and the time and expense of providing robust network security Network Access Protection (NAP). is really minimal. however, during development of the Windows Server 2008 What network administrators need is a flexible, comprehen- IPsec implementation, there were concerns about the sive set of security tools that can be configured to provide impact of additional packet processing on system perfor- varying types and levels of security to meet the diverse mance. To address this concern, Microsoft and Intel worked requirements of different organizations. To meet this need, together on means to minimize the impact on throughput. the Internet Engineering Task Force (IETF) developed a Through these efforts, Microsoft included in its software set of security standards collectively referred to as Internet design the ability to offload IPsec encryption, and Intel Protocol Security or IPsec. IPsec is, essentially, a framework contributed by providing IPsec encryption and decryption of protocols for providing end-to-end security at the packet offloading to hardware on its new generation of Ethernet processing layer of the network. IPsec provides the ability server adapters and controllers. Encryption offloading to implement customizable security for protecting communi- provides enhanced security while maintaining throughput cation among and between workgroups, local area network at near line-rate and minimizing CPu utilization. This white (lAN) computers, domain clients and servers, branch paper provides an overview of the key features and benefits offices (which might be physically remote), extranets, of IPsec as implemented by Microsoft and the performance and roving clients. and security enhancements provided by Intel® Ethernet Server Adapters. 2 Technical White paper IP Security Features – Intel® EThErNET SErver AdapterS and MicroSoft® Windows SErver® 2008 The.Basics.of.IPsec In the interconnected business world of today, sensitive infor- the policies and rules are applied automatically by Windows mation is constantly flowing across networks. Whether it is the Server 2008. Windows Firewall with Advanced Security Internet, intranets, branch offices, or through remote access, (WFAS) is another key feature for simplification in Windows there are numerous places and ways that information security Server 2008. Windows Firewall and IPsec configuration are can be compromised. The challenge for network administrators integrated into WFAS to provide a single tool that simplifies and other information technology (IT) professionals is to ensure setup and eliminates potential conflicts between IPsec and that sensitive network traffic is kept safe from: firewall security policies. • Data modification while in transit (data integrity) In general operation, two computers using IPsec to • Data being read and interpreted while in transit communicate will create two kinds of security associa- (data confidentiality) tions (SAs). These are referred to as main mode and quick mode. In main mode, the computers mutually authenticate • Spoofing of data by unauthenticated parties (data origin authentication) themselves to each other. Authentication is an establish- ment of a certain level of trust, similar to the various levels • Resubmission (replayed) to gain unauthorized access to of badges issued to employees, visitors, and contractors at protected resources (anti-replay or replay protection) a corporate front desk. In quick mode, the two computers IPsec, as implemented in Windows Server 2008, safeguards negotiate the specifics of the SA based on the trust levels against all of the above attacks end-to-end in IP-based and policies previously set by IT. This negotiation includes networks. unlike antivirus, password authentication, and how the two computers will digitally sign and encrypt traffic other security methods that protect at firewalls and routers between each other to ensure secure communications. at the edge of the private network, IPsec protects within the This is analogous to authenticating a vendor or visitor by network. As a consequence, intrusions that breach the firewall establishing identity and issuing an entrance badge, then are still blocked or protected against by IPsec. hence, IPsec negotiating a nondisclosure agreement before exchanging has the advantage of protecting against both internal and sensitive information with the vendor. external attack. Each computer is governed by an IPsec policy that is set up IPsec uses various methods of protection, most notably policy- once and assigned by the IT administrator. The policy can based packet filtering and encryption. This means that security have any number of rules. Each rule has a filter list and a in terms of which computers can talk to each other or access filter action, and the filter list consists of one or more filters certain types of data is governed by policies that are set up that specify the characteristics of the traffic that the filter by the IT organization. IPsec is configurable to meet specific should process, for example addresses, port numbers, and security needs for isolating sensitive systems and data within protocol types. The filter action specifies the action to be an organization and ensuring safe data transit throughout the taken for the specified traffic, whether to permit it, block it, intranet as well as over the Internet to remote sites or branch or negotiate a pair of IPsec SAs. Security actions can have offices. Additionally, a key feature of Windows Server 2008 is various policy-driven options, including encryption suites, the simplification of IPsec policy management for IT adminis- per-packet authentication methods, how often to generate trators. All the administrator has to do is set policy at one point new authentication keys, whether to allow or block commu- for all or any set of user machines and servers. once set, nication with computers not supporting IPsec, and so forth. 3 Technical White paper IP Security Features – Intel® EThErNET SErver AdapterS and MicroSoft® Windows SErver® 2008 In short, IPsec is an extensive framework of tools that allows At this point, several possible questions may come to mind. IT to build customized security based on policies designed For example: how much processing burden does IPsec by IT. Additionally, because IPsec is integrated into the place on the hosts? By far, the largest burden is packet operating system (oS) at the Network layer (layer 3 of the encryption and decryption.
Load more

Recommended publications
  • Usporedba Linux I Microsoft Poslužiteljske Infrastrukture Kao Potpore Poslovanju Malih Tvrtki
    USPOREDBA LINUX I MICROSOFT POSLUŽITELJSKE INFRASTRUKTURE KAO POTPORE POSLOVANJU MALIH TVRTKI Stanešić, Josip Undergraduate thesis / Završni rad 2020 Degree Grantor / Ustanova koja je dodijelila akademski / stručni stupanj: Algebra University College / Visoko učilište Algebra Permanent link / Trajna poveznica: https://urn.nsk.hr/urn:nbn:hr:225:716198 Rights / Prava: In copyright Download date / Datum preuzimanja: 2021-10-02 Repository / Repozitorij: Algebra Univerity College - Repository of Algebra Univerity College VISOKO UČILIŠTE ALGEBRA ZAVRŠNI RAD Usporedba Linux i Microsoft poslužiteljske infrastrukture kao potpore poslovanju malih tvrtki Josip Stanešić Zagreb, veljača 2020. Pod punom odgovornošću pismeno potvrđujem da je ovo moj autorski rad čiji niti jedan dio nije nastao kopiranjem ili plagiranjem tuđeg sadržaja. Prilikom izrade rada koristio sam tuđe materijale navedene u popisu literature, ali nisam kopirao niti jedan njihov dio, osim citata za koje sam naveo autora i izvor, te ih jasno označio znakovima navodnika. U slučaju da se u bilo kojem trenutku dokaže suprotno, spreman sam snositi sve posljedice, uključivo i poništenje javne isprave stečene dijelom i na temelju ovoga rada. U Zagrebu 1. veljače 2020. Josip Stanešić Predgovor Želio bih se zahvaliti svom mentoru i profesoru Vedranu Dakiću, profesorima Silviju Papiću i Jasminu Redžepagiću kao i svim ostalim profesorima na uloženom trudu, prenesenom znanju i odličnom preddiplomskom studiju. Također se želim zahvaliti obitelji na svoj podršci pruženoj tijekom studija. Prilikom uvezivanja rada umjesto ove stranice ne zaboravite umetnuti original potvrde o prihvaćanju teme završnog rada kojeg ste preuzeli u studentskoj referadi Sažetak Male tvrtke osnova su ekonomije Europe. U suvremenom poslovanju IT tehnologija i samim time IT infrastruktura nužni su za poslovanje čak i u tvrtkama kojima osnovna djelatnost nije u području informacijsko-komunikacijskih tehnologija.
    [Show full text]
  • Windows Server 2012 R2 Directaccess
    Windows Server 2012 R2 DirectAccess Deployment Guide UPDATED: 25 March 2021 Windows Server 2012 R2 DirectAccess Copyright Notices Copyright © 2002-2021 Kemp Technologies, Inc. All rights reserved. Kemp Technologies and the Kemp Technologies logo are registered trademarks of Kemp Technologies, Inc. Kemp Technologies, Inc. reserves all ownership rights for the LoadMaster and Kemp 360 product line including software and documentation. Used, under license, U.S. Patent Nos. 6,473,802, 6,374,300, 8,392,563, 8,103,770, 7,831,712, 7,606,912, 7,346,695, 7,287,084 and 6,970,933 kemp.ax 2 Copyright 2002-2021, Kemp Technologies, All Rights Reserved Windows Server 2012 R2 DirectAccess Table of Contents 1 Introduction 5 1.1 Document Purpose 5 1.2 Intended Audience 5 1.3 Related Firmware Version 5 1.4 About the Author 6 1.5 Assumptions 6 2 Load Balancing DirectAccess 7 2.1 Example Environment Setup 8 2.2 Prerequisites 9 3 Virtual Service Configuration 10 3.1 Enable Subnet Originating Requests Globally 10 3.2 Configure DirectAccess for Load Balancing 11 3.3 Configure the Servers Virtual Services 11 3.3.1 Configure a DirectAccess Server Virtual Service 12 3.3.2 Configure an Additional Virtual Service for the DirectAccess Server 13 3.3.3 Configure a Network Location Server (NLS) Virtual Service 14 3.3.4 Configure an NLS (Offloaded) Virtual Service 15 3.4 Configure DirectAccess to use a Load-Balanced NLS 17 3.5 Configure Geographic Load Balancing for NLS 18 4 Multisite Configuration and Load Balancing 22 4.1 Configure DirectAccess for Multisite 22 kemp.ax
    [Show full text]
  • WINDOWS® 8.1 in DEPTH Copyright © 2014 by Pearson Education, Inc
    Windows® 8.1 Brian Knittel Paul McFedries 800 East 96th Street Indianapolis, Indiana 46240 WINDOWS ® 8.1 IN DEPTH Copyright © 2014 by Pearson Education, Inc. All rights reserved. No part of this book shall be reproduced, stored in a Editor-in-Chief retrieval system, or transmitted by any means, electronic, mechanical, photo- Greg Wiegand copying, recording, or otherwise, without written permission from the publisher. No patent liability is assumed with respect to the use of the information con- Executive Editor tained herein. Although every precaution has been taken in the preparation of Rick Kughen this book, the publisher and author assume no responsibility for errors or omis- sions. Nor is any liability assumed for damages resulting from the use of the Development Editor information contained herein. Todd Brakke ISBN-13: 978-0-7897-5281-9 Managing Editor ISBN-10: 0-7897-5281-6 Sandra Schroeder Library of Congress Control Number: 2014930138 Printed in the United States of America Senior Project Editor Tonya Simpson First Printing: March 2014 Trademarks Copy Editor All terms mentioned in this book that are known to be trademarks or service Cheri Clark marks have been appropriately capitalized. Que Publishing cannot attest to the Senior Indexer accuracy of this information. Use of a term in this book should not be regarded as affecting the validity of any trademark or service mark. Cheryl Lenser Windows is a registered trademark of Microsoft Corporation. Technical Editor Warning and Disclaimer Karen Weinstein Every effort has been made to make this book as complete and as accurate as Editorial Assistant possible, but no warranty or fitness is implied.
    [Show full text]
  • F5 and Windows Server 2012 Directaccess/Remote Access Services
    White Paper F5 and Windows Server 2012 DirectAccess/Remote Access Services The F5 BIG-IP platform provides high availability, performance, and scalability when used to deliver traffic management and load balancing for the Microsoft Windows Server 2012 Remote Access Solutions: DirectAccess and Remote Access Services. by Ryan Korock Technical Director, Microsoft Solutions White Paper F5 and Windows Server 2012 Direct Access/Remote Access Services Contents Introduction 3 Benefits of Using F5 Products with DirectAccess and VPN 3 Architecture 4 A DirectAccess/VPN Server Front End 5 A Layered Approach with DirectAccess/VPN Servers 5 Dual Interface Vs. Single Interface DirectAccess/VPN Deployments 6 Single Site Vs. Multisite Deployment 8 Conclusion 9 2 White Paper F5 and Windows Server 2012 Direct Access/Remote Access Services Introduction For Windows 8 and Windows Server 2012, Microsoft has taken two remote access technologies found in previous versions of Windows Server, DirectAccess and VPN Server, and pulled them under the same management umbrella called simply Remote Access. F5 technologies can be deployed to manage traffic and balance loads on these services. Originally introduced in Windows Server 2008 R2 and Windows 7, DirectAccess shifted previous remote access technology. Unlike traditional VPNs, in which connections have been manually initiated at the user level, DirectAccess makes use of a seamless, system-level connection. This means that remote, domain-joined systems will automatically and securely build a corporate network presence upon boot. VPN, formerly known as Remote Access Services (RAS), was introduced in Windows NT and includes the traditional Windows VPN technologies, including IKEv2, SSTP, PPTP, and L2TP. Windows Server 2012 customers can deploy DirectAccess, VPN, or both, and it is often beneficial to deploy both.
    [Show full text]
  • AWS Site-To-Site VPN User Guide AWS Site-To-Site VPN User Guide
    AWS Site-to-Site VPN User Guide AWS Site-to-Site VPN User Guide AWS Site-to-Site VPN: User Guide Copyright © Amazon Web Services, Inc. and/or its affiliates. All rights reserved. Amazon's trademarks and trade dress may not be used in connection with any product or service that is not Amazon's, in any manner that is likely to cause confusion among customers, or in any manner that disparages or discredits Amazon. All other trademarks not owned by Amazon are the property of their respective owners, who may or may not be affiliated with, connected to, or sponsored by Amazon. AWS Site-to-Site VPN User Guide Table of Contents What is Site-to-Site VPN ..................................................................................................................... 1 Concepts ................................................................................................................................... 1 Working with Site-to-Site VPN ..................................................................................................... 1 Site-to-Site VPN limitations ......................................................................................................... 2 Pricing ...................................................................................................................................... 2 How AWS Site-to-Site VPN works ........................................................................................................ 3 Site-to-Site VPN Components .....................................................................................................
    [Show full text]
  • Catalogue-2020.Pdf
    2020 "#$$%&'(! 5%$>- 5 7289-&!:';!<'*=%>'$ 189 *+ ! ! ! "*->8.' CCNA CCNP CCIE ... !"#$%&' ! 66 (%&#)*+"',&)-)!./. ( 195 ( 82 56-#.'*8 ! 227 54'>@A-%&, 231 ! 156 ( +'$,%-&!.'!/*-0',$!1!23,4-.'$ !233 - 5%,*%B ! 176 !!!"elianistech"com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elianistech$com 3 ELIANIS TECH ELIANIS TECH e . !"#$ %&#'()*'+)(#$ ,-('-.+&'$ /+)($ '+0,#$ +&'(+$ /1-&%0-'%"&$ 2+$ #9*)(%'9>$ /-$ '9/9,7"&%+>$ /+$ 296+/",,+0+&'$ 21-,,/%*-'%"&#>$ /+#$ ,")($ +&*-2(+($ /-$ .+#'%"&$ 2+#$ ,("@+'#$ +'$ 0+''(+$ +&$ G)6(+$ )&+$ 4"(0-'%"&#$)'%/%#-'+)(#$-)'")($2+#$-,,/%*-'%"&#$3)(+-)'%8)+#$+'$2+$ *"//-3"(-'+)(#$+&$4"(0-'%"&5 '(-6-%/$*"//-3"(-'%4 $ 21)&$+&6%("&&+0+&'$'+*7&"/".%8)+5 ,("*+##)#$09'%+(#>$")$+&*"(+$/-$'(-&#4"(0-'%"&$2+#$"(.-&%#-'%"&#>$ &"'(+$*-'-/".)+$#1+#'$296+/",,9$-6+*$2+#$0"2)/+#$+'$,-(*")(#$2+$ 4"(0-'%"&$"(%+&'9#$0-&-.+0+&'>$-&-/A#+$+'$09'7"2"/".%+5
    [Show full text]
  • Directaccess-Rmv6tf-26Apr11-Public
    1. Introduction to DirectAccess 2. Technical Introduction 3. Technical Details within Demo 4. Summary Section 2: Technical Introduction Solution Overview Compliant Compliant Client Client Internet NAP/NPS Health Servers IPv6 tunnel over IPv4 Then IPv6 IPsec tunnel inside DirectAccess Thin Edge, Low Cost Clients have transparent IPv6 corpnet connectivity from CORPNET User anywhere with IPsec security Data Center and Business Critical Traffic to corporate network is routed through a Direct Access Resources Server (Windows 2008 R2 Server role) CORPNET User CORPNET Integrates with NAP IPsec enforcement for policy-based Compliant Network perimeter (optional) Forefront UAG and DirectAccess: Better Together Supports many non-DA clients Enables DA client access to Windows Server Windows 2008 IPv4-only internal hosts with 7 DNS64/NAT64 Windows Server 2008 R2 Enhances DA scalability Windows Always On Windows Server Managed 7 and management 2008 R2 IPv4 or IPv6 High avail, load balancing IPv6 SSL-VPN Monitoring, Reports Windows Vista/ Windows Server 2003 Provides OTP user auth Windows XP Legacy Application Non- Server Simplifies deployment and Windows DirectAccess Server administration Non Windows Unmanaged PDA + Server Easy Setup Wizard IPv6 IPv4 or IPv4 Auto GPO, script gen DA Connectivity Assistant Delivers a hardened, edge- ready solution using Forefront Threat Management Gateway firewall core Remote Client Management Only Only the first IPsec infrastructure tunnel is established. Clients have access only to specific infrastructure servers Remote management includes: Active Directory Group Policy, login scripts Pull or push* software updates, AV updates – using same internal mgmt servers Client health checking, reporting and remediation Client monitoring, vulnerability scanning; software inventories Help desk connect out* via Remote Assistance, Remote Desktop * Internally initiated connections outbound to remote DA client requires IPv6 path (e.g.
    [Show full text]
  • Microsoft® Official Academic Course: Networking Fundamentals, Exam
    Microsoft® Official Academic Course Networking Fundamentals, Exam 98-366 VP & PUBLISHER Barry Pruett SENIOR EXECUTIVE EDITOR Jim Minatel MICROSOFT PRODUCT MANAGER Microsoft Learning SENIOR EDITORIAL ASSISTANT Devon Lewis TECHNICAL EDITOR Ron Handlon CHANNEL MARKETING MANAGER Michele Szczesniak CONTENT MANAGEMENT DIRECTOR Lisa Wojcik CONTENT MANAGER Nichole Urban PRODUCTION COORDINATOR Nicole Repasky PRODUCTION EDITOR Umamaheswari Gnanamani COVER DESIGNER Tom Nery COVER PHOTO: © shutterstock/wavebreakmedia Copyright © 2017 by John Wiley & Sons, Inc. All rights reserved. No part of this publication may be reproduced, stored in a retrieval system or transmitted in any form or by any means, electronic, mechanical, photocopying, recording, scanning or otherwise, except as permitted under Sections 107 or 108 of the 1976 United States Copyright Act, without either the prior written permission of the Publisher, or authorization through payment of the appropriate per-copy fee to the Copyright Clearance Center, Inc. 222 Rosewood Drive, Danvers, MA 01923, (978) 750-8400, fax (978) 646-8600. Requests to the Publisher for permission should be addressed to the Permissions Department, John Wiley & Sons, Inc., 111 River Street, Hoboken, NJ 07030-5774, (201) 748-6011, fax (201) 748-6008. To order books or for customer service, please call 1-800-CALL WILEY (225-5945). Microsoft, Active Directory, AppLocker, Bing, BitLocker, Hyper-V, Internet Explorer, Microsoft Intune, Microsoft Office 365, SQL Server, Visual Studio, Windows Azure, Windows, Windows PowerShell, and Windows Server are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries. Other product and company names mentioned herein may be the trademarks of their respective owners. The example companies, organizations, products, domain names, e-mail addresses, logos, people, places, and events depicted herein are fictitious.
    [Show full text]
  • CIS Microsoft Windows Server 2012 Benchmarkv1.0.0
    CIS Microsoft Windows Server 2012 Benchmarkv1.0.0 01-31-2013 The CIS Security Benchmarks division provides consensus-oriented information security products, services, tools, metrics, suggestions, and recommendations (the “SB Products”) as a public service to Internet users worldwide. Downloading or using SB Products in any way signifies and confirms your acceptance of and your binding agreement to these CIS Security Benchmarks Terms of Use. CIS SECURITY BENCHMARKS TERMS OF USE BOTH CIS SECURITY BENCHMARKS DIVISION MEMBERS AND NON-MEMBERS MAY: Download, install, and use each of the SB Products on a single computer, and/or Print one or more copies of any SB Product that is in a .txt, .pdf, .doc, .mcw, or .rtf format, but only if each such copy is printed in its entirety and is kept intact, including without limitation the text of these CIS Security Benchmarks Terms of Use. UNDER THE FOLLOWING TERMS AND CONDITIONS: SB Products Provided As Is. CIS is providing the SB Products “as is” and “as available” without: (1) any representations, warranties, or covenants of any kind whatsoever (including the absence of any warranty regarding: (a) the effect or lack of effect of any SB Product on the operation or the security of any network, system, software, hardware, or any component of any of them, and (b) the accuracy, utility, reliability, timeliness, or completeness of any SB Product); or (2) the responsibility to make or notify you of any corrections, updates, upgrades, or fixes. Intellectual Property and Rights Reserved. You are not acquiring any title or ownership rights in or to any SB Product, and full title and all ownership rights to the SB Products remain the exclusive property of CIS.
    [Show full text]
  • [MS-WPO]: Windows Protocols Overview
    [MS-WPO]: Windows Protocols Overview This document provides an overview of the Windows Protocols Overview Protocol Family. It is intended for use in conjunction with the Microsoft Protocol Technical Documents, publicly available standard specifications, network programming art, and Microsoft Windows distributed systems concepts. It assumes that the reader is either familiar with the aforementioned material or has immediate access to it. A Protocol System Document does not require the use of Microsoft programming tools or programming environments in order to implement the Protocols in the System. Developers who have access to Microsoft programming tools and environments are free to take advantage of them. Intellectual Property Rights Notice for Open Specifications Documentation . Technical Documentation. Microsoft publishes Open Specifications documentation for protocols, file formats, languages, standards as well as overviews of the interaction among each of these technologies. Copyrights. This documentation is covered by Microsoft copyrights. Regardless of any other terms that are contained in the terms of use for the Microsoft website that hosts this documentation, you may make copies of it in order to develop implementations of the technologies described in the Open Specifications and may distribute portions of it in your implementations using these technologies or your documentation as necessary to properly document the implementation. You may also distribute in your implementation, with or without modification, any schema, IDL's, or code samples that are included in the documentation. This permission also applies to any documents that are referenced in the Open Specifications. No Trade Secrets. Microsoft does not claim any trade secret rights in this documentation. Patents. Microsoft has patents that may cover your implementations of the technologies described in the Open Specifications.
    [Show full text]
  • A: Directaccess Provides Seamless and Transparent, Always On, Bi-Directional Remote Network Connectivity for Managed Windows Clients
    Q: What is DirectAcces (DA)? A: DirectAccess provides seamless and transparent, always on, bi-directional remote network connectivity for managed Windows clients. Administrators can manage clients when they are outside the network, and remote users can access internal network resources whenever they have an Internet connection. Q: What's the difference between DirectAccess and VPN? A: DA and traditional VPN's both allow remote access to the internal network, but DA also allows remote management to maintain client compliance with security policies. Also, client-based VPN requires the user to initiate a connection to the corporate network where DirectAccess does not. Q: What are the requirements to deploy DirectAccess? A: The minimum DA infrastructure requires: Server running Windows Server 2012 R2 for current full functionality Active Directory DNS Clients and servers must be domain joined Public key infrastructure (PKI) is required to support Windows 7 clients, in addition to advanced features like OTP authentication, NAP integration, and multi-site deployments. Required certificate: SSL certificate – an SSL certificate issued from a trusted third-party public CA is recommended, but an internal CA can be used. If an internal CA is used, the certificate revocation list (CRL) must be publicly available. Recommended: Computer certificate – a computer certificate issued to the DirectAccess server and clients from internal CA. Q: How do I determine hardware needs? A: It's recommended to run DA on its own hardware, with supporting technologies running on separate servers. Each deployment will have its own needs for hardware components. Q: What clients are supported? A: Windows 7 Enterprise and Ultimate, Windows 8 and later Enterprise.
    [Show full text]
  • Using Directaccess to Provide Secure Access to Corporate Resources from Anywhere
    Using DirectAccess to Provide Secure Situation In the past few years, advances in Access to Corporate Resources from mobile computers and wireless broadband have enabled users to be Anywhere more productive while away from the office. According to IDC†, the third Published: May 2009 quarter of 2008 marked the point at which computer manufacturers began Although broadband services and Wi-Fi have dramatically improved, shipping more mobile computers than desktop computers worldwide. In 2008, the connectivity experience for remote corporate users remains largely remote workers will represent 26.8 % of unchanged. Microsoft Information Technology (Microsoft IT) is the total workforce, and that number will adopting the DirectAccess feature in Windows® 7 and in increase to 30.4% by 2011‡. Clearly, users are becoming more mobile, and IT Windows Server® 2008 R2 to enable employees to gain seamless professionals must provide an remote access to corporate applications and data. The solution, which infrastructure to allow them to remain only requires Internet connectivity and credentials, significantly productive. improves productivity and can be an important cost-saving The changing structure of business puts mechanism. more pressure on IT professionals to provide a high-performance and secure infrastructure for connecting remote Situation users while managing remote users and Today’s workforce is more mobile than ever. In order to maximize productivity, employees minimizing costs. need to have access to intranet resources wherever they travel. Providing this level of connectivity in a secure, manageable, and seamless way has been difficult with traditional Solution virtual private networks (VPNs). Connecting to a VPN requires multiple steps, which causes Microsoft IT is implementing delays while users wait for authentication.
    [Show full text]