locked
Network Location Server for UAG 2010 DirectAccess Feature RRS feed

  • Question

  • Dears,

    I need to deploy a UAG 2010 array of two servers to publish Exchjange and SharePoint through a it and to provide DirectAccess feature for remote users. However, I read in the technet that you need a server called Newtork Location Server for DirectAccess, may you please help me identify the minimum requirements for this server from HW, SW and certificate wise? and how also to configure it.

    Thanks

    Sunday, March 20, 2011 1:18 PM

Answers

All replies

  • and also if it can be virtualized on VMware or not?
    Sunday, March 20, 2011 1:19 PM
  • Hi,

     

    The Network location server is a single HTTP server (Microsoft or other) located on your LAN that can be reachable by any DirectAccess enabled client. If they can reach this server, they consider they are on the LAN. So there no need to activate NRPT on client-side.

     

    From a technical point of view, just install a web server with a content that respond to an internal FQDN. This Web server must respond in HTTPS with a Web Server certificate that can be provided by an internal ADCS role. Virtualization is not a problem.

     

    Have a nice day.


    BenoitS - Simple by Design http://danstoncloud.com/blogs/simplebydesign/default.aspx
    Sunday, March 20, 2011 4:27 PM
  • This may help:

    http://blog.concurrency.com/infrastructure/uag-directaccess-network-location-server-nls/

    The NLS role is VERY important for DirectAccess and should ideally be highly available using a web farm (using IIS with NLB for example); coexisting on an existing farm (assuming you have one) is one option to minimise additional server infrastructure...

    Cheers

    JJ


    Jason Jones | Forefront MVP | Silversands Ltd | My Blogs: http://blog.msedge.org.uk and http://blog.msfirewall.org.uk
    • Marked as answer by AhmadJY Wednesday, April 13, 2011 2:08 PM
    Tuesday, March 22, 2011 12:30 AM