Here’s an interesting story about a UAG DirectAccess deployment that seemed to be working well. The remote DirectAccess client could connect to the DA server, could connect to resources located on the corpnet over IPv6 and over NAT64/DNS64, and was able to resolve names.

The problem was that the internal servers acting as management servers weren’t able to “manage out” some of the DA clients on the Internet. What was the problem? DNS!

Remember, the DA clients need to be able to register their names with your DNS servers to enable management stations to connect to the DA clients. In addition, the DA clients need to be able to registered their IPv6 address, since manage out with the management station initiating the connection to the DA client is not supports with NAT64/DNS64.

For more information, check out:

http://blogs.technet.com/edgeaccessblog/archive/20...e.aspx

HTH,

Deb

DEBRA LITTLEJOHN SHINDER
MVP (Enterprise Security)
“MS SECURITY”
dshinder@isaserver.org