Question

Assume you are the network administrator for a mid-sized organization. Recently, management has given permission for several employees to work remotely. Your organization has used VPN access in the past for short-term traveling assignments. Discuss the pros and cons of implementing DirectAccess, and always on VPN vs normal VPN solutions.

Your post should be 250-500 words.

Answer 1

step1:

Direct Access

PROS:

• A part of server 2016, can be supported for a long time.
• assures that clients systems are always connected to the corporate network.
• There is no need for the user to establish connection to a server by the use of a client.
• Secure
• keeps vpn logs

CONS:

• It is costly. The configuration is soo expensive.
• It is limited
• All the clients should be domain joined

Step2:

Always on VPN

PROS:

• Easy to implement.
• Easy to manage than direct acess.
• More secure than direct access
• It do conditional acess and system health checks using NPS.
• It is infrastructure independent.
• You can use features like traffic filtering, app triggered VPS and device compliance.
• It is best for work from home or from anywhere business.
• Cn use IPV4 and IPV6
• Can be pushed to mobile devices
• It can perform split or force tunneling

CONS:

• Not supported on windows 7. Only support windows 10 and more.
• It cannot be managed natively by the use of active directory or group policy.
• We need Microsoft intune, SCCM or powershell for configuring and management.

Step3:

Normal VPN

PROS-  

• Non domain joined cients can also use.
• It help you to bypass geo blocks.
• Unlike DA It can bypass isp throttling
• It is more affordable.
• It is cross platform friendly.

CONS:

• Do not support remote acess.
• It required connection to be manually established.

Note: The best among all these for remote access is always on VPN