locked
UAG, DA & NLS RRS feed

  • Question

  • Hi,

    When setting up UAG & DirectAccess, there is need of a Network Location Service...

    So essentially this needs to sit on a IIS server...could it be on the internal IP of UAG? or the internal PKI server?

    And this URL must not be available from the Internet, correct?

    Thanks,

    Sk


    • Edited by D Wind Sunday, November 6, 2011 11:03 AM
    Sunday, November 6, 2011 9:15 AM

Answers

  • You're right. This URL must not be accessible from DirectAccess clients located on Internet. When DirectAccess clients are connected on LAN, they must be able to :

    -Locate this ressource

    -Connect to this web site in HTTPS without authentication

    -Download any offered content.

     

    Have a nice day.


    BenoitS - Simple by Design http://danstoncloud.com/blogs/simplebydesign/default.aspx
    • Marked as answer by D Wind Monday, November 7, 2011 8:34 AM
    Sunday, November 6, 2011 2:27 PM

All replies

  • You're right. This URL must not be accessible from DirectAccess clients located on Internet. When DirectAccess clients are connected on LAN, they must be able to :

    -Locate this ressource

    -Connect to this web site in HTTPS without authentication

    -Download any offered content.

     

    Have a nice day.


    BenoitS - Simple by Design http://danstoncloud.com/blogs/simplebydesign/default.aspx
    • Marked as answer by D Wind Monday, November 7, 2011 8:34 AM
    Sunday, November 6, 2011 2:27 PM
  • thank you
    Monday, November 7, 2011 8:34 AM