Direct Access

Question 1

What are the direct access server requirements?

Answer 1

Question 2

Direct access external DNS requirements?

Answer 2

• DirectAccess server, such as directaccess.contoso.com
• Certificate Revocation List (CRL), such as crl.contoso.com

Question 3

What are the certificate requirements for Direct Access?

Answer 3

• The IP-HTTPS listener on the DirectAccess server requires a website certificate. The IP-HTTPS listener requires a website certificate, and the DirectAccess client must be able to contact the server hosting the CRL for the certificate.
• The DirectAccess server requires a computer certificate to establish the IPsec connections with the DirectAccess clients.

Question 4

Direct access Internal DNS Requirements

Answer 4

One A record for the NLS server

One A record for the CRL Server

Remove ISATAP from Global Query Block List using dnscmd /config /globalqueryblocklist isatap