IPD - DirectAccess version 12

InfrastructurePlanningandDesignDirectAccessVersion1.2Published:October2009Updated:February2010Forthelatestinformation,pleaseseewww.microsoft.com/IPDSolutionAcceleratorsmicrosoft.com/technet/SolutionAcceleratorsCopyright©2010MicrosoftCorporation.ThisdocumentationislicensedtoyouundertheCreativeCommonsAttributionLicense.Toviewacopyofthislicense,visit,543HowardStreet,5thFloor,SanFrancisco,California,94105,USA.Whenusingthisdocumentation,providethefollowingattribution:InfrastructurePlanningandDesignisprovidedwithpermissionfromMicrosoftCorporation.Thisdocumentationisprovidedtoyouforinformationalpurposesonly,andisprovidedtoyouentirelyASIS.YouruseofthedocumentationcannotbeunderstoodassubstitutingforcustomizedserviceandinformationthatmightbedevelopedbyMicrosoftCorporationforaparticularuserbaseduponthatuser’sparticularenvironment.Totheextentpermittedbylaw,MICROSOFTMAKESNOWARRANTYOFANYKIND,DISCLAIMSALLEXPRESS,IMPLIEDANDSTATUTORYWARRANTIES,ANDASSUMESNOLIABILITYTOYOUFORANYDAMAGESOFANYTYPEINCONNECTIONWITHTHESEMATERIALSORANYINTELLECTUALPROPERTYINTHEM.Microsoftmayhavepatents,patentapplications,trademarks,orotherintellectualpropertyrightscoveringsubjectmatterwithinthisdocumentation.ExceptasprovidedinaseparateagreementfromMicrosoft,youruseofthisdocumentdoesnotgiveyouanylicensetothesepatents,trademarksorotherintellectualproperty.Informationinthisdocument,includingURLandotherInternetWebsitereferences,issubjecttochangewithoutnotice.Unlessotherwisenoted,theexamplecompanies,organizations,products,domainnames,e-mailaddresses,logos,people,placesandeventsdepictedhereinarefictitious.Microsoft,ActiveDirectory,Forefront,Hyper-V,Windows,WindowsServer,andWindowsVistaareeitherregisteredtrademarksortrademarksofMicrosoftCorporationintheUnitedStatesand/orothercountries.Thenamesofactualcompaniesandproductsmentionedhereinmaybethetrademarksoftheirrespectiveowners.YouhavenoobligationtogiveMicrosoftanysuggestions,commentsorotherfeedback(“Feedback”)relatingtothedocumentation.However,ifyoudoprovideanyFeedbacktoMicrosoftthenyouprovidetoMicrosoft,withoutcharge,therighttouse,shareandcommercializeyourFeedbackinanywayandforanypurpose.Youalsogivetothirdparties,withoutcharge,anypatentrightsneededfortheirproducts,technologiesandservicestouseorinterfacewithanyspecificpartsofaMicrosoftsoftwareorservicethatincludestheFeedback.YouwillnotgiveFeedbackthatissubjecttoalicensethatrequiresMicrosofttolicenseitssoftwareordocumentationtothirdpartiesbecauseweincludeyourFeedbackinthem.SolutionAcceleratorsmicrosoft.com/technet/SolutionAcceleratorsContentsThePlanningandDesignSeriesApproach......................................................1IntroductiontotheDirectAccessGuide...........................................................2DirectAccessinMicrosoftInfrastructureOptimization....................................3DirectAccessDesignProcess...........................................................................4Step1:DefinetheScopeoftheDirectAccessProject......................................7Step2:DetermineNetworkRequirements......................................................9Step3:DesignDirectAccessServerInfrastructure.......................................13Step4:DesignWebServersandCertificateInfrastructure...........................16DirectAccessandMicrosoftForefrontUnifiedAccessGateway.....................20Conclusion....................................................................................................21AppendixA:JobAids....................................................................................22AppendixB:DirectAccessComponentsataGlance.......................................24VersionHistory.............................................................................................26Acknowledgments.........................................................................................27SolutionAcceleratorsmicrosoft.com/technet/SolutionAcceleratorsThePlanningandDesignSeriesApproachThisguideisoneinaseriesofplanninganddesignguidesthatclarifyandstreamlinetheplanninganddesignprocessforMicrosoft®infrastructuretechnologies.Eachguideintheseriesaddressesauniqueinfrastructuretechnologyorscenario.Theseguidesincludethefollowingtopics:Definingthetechnicaldecisionflow(flowchart)throughtheplanningprocess.Describingthedecisionstobemadeandthecommonlyavailableoptionstoconsiderinmakingthedecisions.Relatingthedecisionsandoptionstothebusinessintermsofcost,complexity,andothercharacteristics.Framingthedecisionintermsofadditionalquestionstothebusinesstoensureacomprehensiveunderstandingoftheappropriatebusinesslandscape.Theguidesinthisseriesareintendedtocomplementandaugmenttheproductdocumentation.BenefitsofUsingThisGuideUsingthisguidewillhelpanorganizationtoplanthebestarchitectureforthebusinessandtodeliverthemostcost-effectiveMicrosoftDirectAccesstechnology.BenefitsforBusinessStakeholders/DecisionMakers:Mostcost-effectivedesignsolutionforanimplementation.InfrastructurePlanningandDe