Implementing Always On VPN

Implement and support Windows 10 Always On VPN, the successor to Microsoft’s popular DirectAccess. This book teaches you everything you need to know to test and adopt the technology at your organization that is widely deployed around the world.

The book starts with an introduction to Always On VPN and discusses fundamental concepts and use cases to compare and contrast it with DirectAccess. You will learn the prerequisites required for implementation and deployment scenarios. The book presents the details of recommended VPN protocols, client IP address assignment, and firewall requirements. Also covered is how to configure Routing and Remote Access Service (RRAS) along with security and performance optimizations. The Configuration Service Provider (CSP) is discussed, and you will go through provisioning Always On VPN to Windows 10 clients using PowerShell and XML as well as Microsoft Intune. Details about advanced client configuration and integration with Azure security services are included. You will know how to implement Always On VPN infrastructure in a redundant and highly available (HA) configuration, and guidance for ongoing system maintenance and operational support for the VPN and NPS infrastructure is provided. And you will know how to diagnose and troubleshoot common issues with Always On VPN.

After reading this book, you will be able to plan, design, and implement a Windows 10 Always On VPN solution to meet your specific requirements.

What Will You Learn

• Prepare your infrastructure to support Windows 10 Always On VPN on premises or in the cloud
• Provision and manage Always On VPN clients using modern management methods such as Intune
• Understand advanced integration concepts for extending functionality with Microsoft Azure
• Troubleshoot and resolve common configuration and operational errors for your VPN

Who This Book Is For

IT professionals and technology administrators for organizations of all sizes

Table of Contents

Chapter 1: Always On VPN Overview

Chapter 2: Plan for Always On VPN

Chapter 3: Prepare the Infrastructure

Chapter 4: Configure Windows Server for Always On VPN

Chapter 5: Provision Always On VPN Clients

Chapter 6: Advanced Configuration

Chapter 7: Cloud Deployments

Chapter 8: Deploy Certificates with Intune

Chapter 9: Azure MFA Integration

Chapter 10: High Availability

Chapter 11: Monitor and Report

Chapter 12: Troubleshooting

About the Author

Richard Hicks is the founder and principal consultant at Richard M. Hicks Consulting, Inc. He is a widely recognized enterprise mobility and security infrastructure expert with more than 25 years of experience implementing secure remote access and Public Key Infrastructure (PKI) solutions for organizations around the world. Richard is a former Microsoft Most Valuable Professional (MVP 2009-2019) and is active in the online community, sharing his knowledge and experience with IT professionals on his blog and through various social media channels.