http://www.loc.gov/mods/v3 http://www.loc.gov/standards/mods/v3/mods-3-2.xsd
modern mobility with Microsoft Windows 10 and Windows Server 2022
1 online resource : illustrations (some color)
Implement and support Windows 10 Always On VPN, the successor to Microsoft's popular DirectAccess. This book teaches you everything you need to know to test and adopt the technology at your organization that is widely deployed around the world. The book starts with an introduction to Always On VPN and discusses fundamental concepts and use cases to compare and contrast it with DirectAccess. You will learn the prerequisites required for implementation and deployment scenarios. The book presents the details of recommended VPN protocols, client IP address assignment, and firewall requirements. Also covered is how to configure Routing and Remote Access Service (RRAS) along with security and performance optimizations. The Configuration Service Provider (CSP) is discussed, and you will go through provisioning Always On VPN to Windows 10 clients using PowerShell and XML as well as Microsoft Intune. Details about advanced client configuration and integration with Azure security services are included. You will know how to implement Always On VPN infrastructure in a redundant and highly available (HA) configuration, and guidance for ongoing system maintenance and operational support for the VPN and NPS infrastructure is provided. And you will know how to diagnose and troubleshoot common issues with Always On VPN. After reading this book, you will be able to plan, design, and implement a Windows 10 Always On VPN solution to meet your specific requirements. You will: Prepare your infrastructure to support Windows 10 Always On VPN on premises or in the cloud Provision and manage Always On VPN clients using modern management methods such as Intune Understand advanced integration concepts for extending functionality with Microsoft Azure Troubleshoot and resolve common configuration and operational errors for your VPN.
Intro -- Table of Contents -- About the Author -- About the Technical Reviewer -- Acknowledgments -- Introduction -- Chapter 1: Always On VPN Overview -- VPN -- DirectAccess -- Demise of DirectAccess -- DirectAccess Replacement -- Always On VPN -- Always On VPN Infrastructure -- Routing and Remote Access Service -- Network Policy Server -- Infrastructure Independent -- Modern Management -- Cloud Integration -- Summary -- Chapter 2: Plan for Always On VPN -- VPN Server -- Windows Server -- Domain Join -- Server Core -- Network Interfaces -- Network Placement -- IPv6
Non-Microsoft VPN Devices -- IKEv2 -- Windows Store Client -- Authentication Server -- Windows Server -- PKI -- VPN Protocols -- IKEv2 -- SSTP -- L2TP -- PPTP -- Certificates -- SSTP -- IKEv2 -- NPS -- User Authentication -- Device Authentication -- TPM -- VPN Client IP Addressing -- DHCP -- Static Pool -- Address Range -- IPv4 Subnet -- IPv6 Prefix -- Split vs. Force Tunneling -- Split Tunnel -- Force Tunnel -- Firewall Configuration -- IKEv2 -- SSTP -- NAT Configuration -- Client Provisioning -- Microsoft Endpoint Manager -- PowerShell -- MECM -- Co-management -- Summary
Chapter 3: Prepare the Infrastructure -- Security Groups -- Certificates -- Certificate Templates -- VPN Server -- NPS Server -- User Authentication -- Device Authentication -- Kerberos Authentication -- Issue Certificate Templates -- Issuing CA Servers -- Certificate Autoenrollment -- Autoenrollment GPO -- Summary -- Chapter 4: Configure Windows Server for Always On VPN -- Network Policy Server -- Preparation -- Install NPS -- Configure NPS -- RADIUS Client -- Network Policy -- Routing and Remote Access Service Server -- Preparation -- Network Configuration -- Single NIC -- Dual NIC
External Interface -- Internal Interface -- Static Routes -- Certificates -- IKEv2 IPsec Certificate -- Server GUI Domain-Joined -- Server GUI Non-Domain Joined -- Export CA Certificates -- Import CA Certificates -- Generate CSR -- Request Certificate -- Server Core Domain-Joined -- Create INF File -- Create CSR -- Server Core Non-Domain Joined -- SSTP Certificate -- Install RRAS -- Install RSAT -- Windows Server -- Windows 10 -- Configure RSAT -- Configure RRAS -- Optimize RRAS -- IKEv2 Settings -- IPsec Parameters -- IKEv2 Fragmentation -- IKEv2 Root Certificate -- IKEv2 CRL Check
TLS Configuration -- Summary -- Chapter 5: Provision Always On VPN Clients -- Validation Testing -- Verify Certificates -- Test Profile -- VPN Settings -- Authentication Settings -- Network Settings -- Routing -- IPsec Policy -- Test Connection -- SSTP -- IKEv2 -- Device Authentication -- Profile Deployment -- Microsoft Endpoint Manager -- Profile Configuration -- User Tunnel -- Device Tunnel -- Additional Configuration -- Custom XML -- XML Configuration -- Endpoint Manager -- PowerShell Script -- User Tunnel -- Device Tunnel -- SCCM -- Group Policy -- Group Policy Object -- Policy Settings