Implementing Always On VPN : modern mobility with Microsoft Windows 10 and Windows Server 2022 / Richard M. Hicks.
Hicks, Richard M., author.
2022
TK5105.875.E87 H53 2021eb
Available Online

Linked e-resources

Linked Resource Online Access
Concurrent users Unlimited
Authorized users Authorized users
Document Delivery Supplied Can lend chapters, not whole ebooks

Details

Title Implementing Always On VPN : modern mobility with Microsoft Windows 10 and Windows Server 2022 / Richard M. Hicks.
Author Hicks, Richard M., author.
ISBN 9781484277416 (electronic bk.)
1484277414 (electronic bk.)
1484277406
9781484277409
DOI https://doi.org/10.1007/978-1-4842-7741-6
Published [New York, NY] : Apress, [2022]
Language English
Description 1 online resource : illustrations (some color)
Item Number 10.1007/978-1-4842-7741-6 doi
9781484277409
9781484277416
Call Number TK5105.875.E87 H53 2021eb
Dewey Decimal Classification 004.67/84
Summary Implement and support Windows 10 Always On VPN, the successor to Microsoft's popular DirectAccess. This book teaches you everything you need to know to test and adopt the technology at your organization that is widely deployed around the world. The book starts with an introduction to Always On VPN and discusses fundamental concepts and use cases to compare and contrast it with DirectAccess. You will learn the prerequisites required for implementation and deployment scenarios. The book presents the details of recommended VPN protocols, client IP address assignment, and firewall requirements. Also covered is how to configure Routing and Remote Access Service (RRAS) along with security and performance optimizations. The Configuration Service Provider (CSP) is discussed, and you will go through provisioning Always On VPN to Windows 10 clients using PowerShell and XML as well as Microsoft Intune. Details about advanced client configuration and integration with Azure security services are included. You will know how to implement Always On VPN infrastructure in a redundant and highly available (HA) configuration, and guidance for ongoing system maintenance and operational support for the VPN and NPS infrastructure is provided. And you will know how to diagnose and troubleshoot common issues with Always On VPN. After reading this book, you will be able to plan, design, and implement a Windows 10 Always On VPN solution to meet your specific requirements. You will: Prepare your infrastructure to support Windows 10 Always On VPN on premises or in the cloud Provision and manage Always On VPN clients using modern management methods such as Intune Understand advanced integration concepts for extending functionality with Microsoft Azure Troubleshoot and resolve common configuration and operational errors for your VPN.
Note Includes index.
Access Note Access limited to authorized users.
Copyright Information © Copyright 2022 Richard M. Hicks. 2022
Digital File Characteristics text file
Source of Description Online resource; title from digital title page (viewed on January 04, 2022).
Available in Other Form Implementing Always On VPN.
Linked Resources Online Access
Record Appears in Online Resources > Ebooks
All Resources
Intro
Table of Contents
About the Author
About the Technical Reviewer
Acknowledgments
Introduction
Chapter 1: Always On VPN Overview
VPN
DirectAccess
Demise of DirectAccess
DirectAccess Replacement
Always On VPN
Always On VPN Infrastructure
Routing and Remote Access Service
Network Policy Server
Infrastructure Independent
Modern Management
Cloud Integration
Summary
Chapter 2: Plan for Always On VPN
VPN Server
Windows Server
Domain Join
Server Core
Network Interfaces
Network Placement
IPv6

Non-Microsoft VPN Devices
IKEv2
Windows Store Client
Authentication Server
Windows Server
PKI
VPN Protocols
IKEv2
SSTP
L2TP
PPTP
Certificates
SSTP
IKEv2
NPS
User Authentication
Device Authentication
TPM
VPN Client IP Addressing
DHCP
Static Pool
Address Range
IPv4 Subnet
IPv6 Prefix
Split vs. Force Tunneling
Split Tunnel
Force Tunnel
Firewall Configuration
IKEv2
SSTP
NAT Configuration
Client Provisioning
Microsoft Endpoint Manager
PowerShell
MECM
Co-management
Summary

Chapter 3: Prepare the Infrastructure
Security Groups
Certificates
Certificate Templates
VPN Server
NPS Server
User Authentication
Device Authentication
Kerberos Authentication
Issue Certificate Templates
Issuing CA Servers
Certificate Autoenrollment
Autoenrollment GPO
Summary
Chapter 4: Configure Windows Server for Always On VPN
Network Policy Server
Preparation
Install NPS
Configure NPS
RADIUS Client
Network Policy
Routing and Remote Access Service Server
Preparation
Network Configuration
Single NIC
Dual NIC

External Interface
Internal Interface
Static Routes
Certificates
IKEv2 IPsec Certificate
Server GUI Domain-Joined
Server GUI Non-Domain Joined
Export CA Certificates
Import CA Certificates
Generate CSR
Request Certificate
Server Core Domain-Joined
Create INF File
Create CSR
Server Core Non-Domain Joined
SSTP Certificate
Install RRAS
Install RSAT
Windows Server
Windows 10
Configure RSAT
Configure RRAS
Optimize RRAS
IKEv2 Settings
IPsec Parameters
IKEv2 Fragmentation
IKEv2 Root Certificate
IKEv2 CRL Check

TLS Configuration
Summary
Chapter 5: Provision Always On VPN Clients
Validation Testing
Verify Certificates
Test Profile
VPN Settings
Authentication Settings
Network Settings
Routing
IPsec Policy
Test Connection
SSTP
IKEv2
Device Authentication
Profile Deployment
Microsoft Endpoint Manager
Profile Configuration
User Tunnel
Device Tunnel
Additional Configuration
Custom XML
XML Configuration
Endpoint Manager
PowerShell Script
User Tunnel
Device Tunnel
SCCM
Group Policy
Group Policy Object
Policy Settings

Browse Subjects

Show more subjects...

Statistics

from
to
Export