Microsoft DirectAccess is a VPN like remote access technology that is a core component of the Windows Server 2012 R2 Remote Access role. DirectAccess is a unique solution that is designed to replace traditional VPN access. It provides secure, seamless, transparent and always-on remote access to corporate networks for clients running Windows 7 Enterprise, Windows 7 Ultimate, Windows 8.1 Enterprise, and now, Windows 10. Windows 10 support is welcome as over half of the 110 million managed Microsoft clients in Enterprise deployments have adopted the latest release. Eager as they are to get the new features Windows 10 offers, such as the new improved Start menu, the modern Edge web browser, Cortana – the intelligent personal assistant, Windows Hello authentication, and many other improvements. DirectAccess provides these advantages over most traditional VPN solutions: - Active Directory Domain joined client computers connect automatically rather than connections being user initiated - Connections seamlessly work through all firewalls - Supports selected server access when connected - Can use IPSEC authentication to corporate servers - Supports end to end encryption of the connection - Provides transparent failover to another corporate network access point or site if required - Supports offline domain join for clients that have never been on the corporate network -Allows central IT staff to manage the remote computers over the DirectAccess connection The integration with standard corporate Domains and the ability to manage clients remotely is very compelling especially for maintaining a client population that is remote and mobile with users who seldom connect directly to a corporate network. Windows 10 and DirectAccess work really well in concert to provide a true remote access solution for Windows based clients. One that users will not have to struggle with, and one that IT and security staff can be confident about using.

1. #DirectAccess
Maximize Your Investment in
Windows 10
With DirectAccess and KEMP LoadMaster

2. #DirectAccess
Introduction
• Richard Hicks
• Independent Consultant
• Microsoft MVP – Enterprise Security
• 20 Year Industry Veteran
• Edge Security and Remote Access

3. #DirectAccess
DirectAccess Overview and Demonstration
Introduction to Windows 10
DirectAccess Enterprise Features
Windows 10 and DirectAccess
DirectAccess and the KEMP LoadMaster

4. #DirectAccess
Windows 10
Released
July 29, 2015
110 Million
Devices
Fastest
Adoption Rate
Ever
Half of
Microsoft
Managed
Customers

5. #DirectAccess
What’s New in Windows 10
• New Start Menu
• Virtual Desktops
• Edge Browser
• Windows Hello
• Cortana
• Universal Apps
• Enterprise Data Protection
• Passport
• Azure AD Integration
• Device Guard

6. #DirectAccess
Skipped Windows 8 Planning Migration
Maximize Investment in Windows 10

7. #DirectAccess
DirectAccess
• Next Generation
Remote Access
• Windows Server
2012 R2
• Seamless and
Transparent
• Always On
• Bi-directional

8. #DirectAccess
DirectAccess vs. VPN

9. #DirectAccess
VPN
User Initiated
Manual Process
Cumbersome

10. #DirectAccess
DirectAccess
Computer Initiated
Automatic
Easy to Use

11. #DirectAccess
DirectAccess in Action

12. #DirectAccess
DirectAccess Advantages
End User
Streamlined User
Experience
Familiar Access
Increased Productivity

13. #DirectAccess
DirectAccess Advantages
Administrator
Always Managed
Improved Security and
Compliance
Reduced Support Costs

14. #DirectAccess
DirectAccess Enterprise Features
Local Redundancy
• Load-balanced clusters
• Easily scalable
• Eliminates single point
of failure
Geographic
Redundancy
• Multiple physical
locations
• Automatic site
selection*
• Transparent failover*
* Does not include Windows 7

15. #DirectAccess
Windows 10 and DirectAccess

16. #DirectAccess
Better Together!
Full Support for
Enterprise Features
Automatic Site
Selection
Transparent Failover Offline Domain Join

17. #DirectAccess
DirectAccess and KEMP

18. #DirectAccess
NLB
• Broadcast-based
• Poor Visibility
• No Granular Control
LoadMaster
• IP-based
• Increased Visibility
• Fine-Grained Traffic
Control
Enhanced Load Balancing

19. #DirectAccess
Native Site Selection
• Rudimentary
• No Location Awareness
• Lacks Entry Point Status
Information
LoadMaster GEO
• Intelligent
• Location Aware
• Entry Point Health and
Load Aware
Enhanced Geographic Redundancy

20. #DirectAccess
Network Location
Server (NLS)
• Used for Inside/Outside
Detection
• Web Server w/SSL
Certificate
• Highly Available
LoadMaster
• Intelligent
• GEO for Location
Awareness
• Used for NLS
Enhance Supporting Infrastructure

21. #DirectAccess
KEMP LoadMaster in Action

22. #DirectAccess
DirectAccess Deployment Guide
Detailed Information
Prescriptive Guidance
Advanced Configuration
kempte.ch/DirectAccessGuide

23. #DirectAccess
About KEMP Technologies

24. #DirectAccess
Company Overview
• What We Do
– Make applications highly available
– Improve scalability & performance
– Secure and optimize application delivery
• The KEMP Difference
– Application/workload-centric
– Platform independence/ubiquity
– Easy to purchase, deploy and use
End Users
&
Devices
Application
Workloads

25. #DirectAccess
GEO Enabled LoadMaster
How KEMP fits as part of Microsoft Platform
Remote
Desktop
Services
SharePoint
Servers
Exchange
Servers
SharePoint ADFS Proxy
ADFS Farm
RDS IIS
ADFS
Servers
Dynamics
Servers
Skype for
Business
DirectAccess

26. #DirectAccess
Gartner Magic Quadrant
“Kemp has a solid range of physical and
virtual appliance deployment options, and
is the only vendor that supports native
bare-metal deployments on Cisco, Dell,
Fujitsu, HP, and Oracle server hardware.”
-Gartner

27. #DirectAccess
KEMP Resource Library
http://kemptechnologies.com/resource-library/
DirectAccess Deployment Guide
https://support.kemptechnologies.com/hc/en-us/articles/203343999
ADFS Deployment Guide
https://support.kemptechnologies.com/hc/en-us/articles/204250925-AD-FS-v3
Remote Desktop Deployment Guide
https://support.kemptechnologies.com/hc/en-us/articles/203858115-Remote-Desktop-Services
Free KEMP LoadMaster
http://freeloadbalancer.com/
Additional Resources

28. #DirectAccess
http://kemptechnologies.com/DirectAccess
http://directaccess.richardhicks.com/