In: Computer Science
Answer 1:
Direct access and VPN role services should be installed if the admin wants client computers to be able to authenticate an IPsec connection with Kerberos proxy.
Explanation:
Connections to DirectAccess are created by the
computer, not the client. They are protected and authenticated and
are immediately created if there is an active Internet link on the
DirectAccess client. DirectAccess links, which is an essential
difference, are also bidirectional. The opportunity to "manage out"
dynamically attached DirectAccess clients helps IT, administrators,
to provide compelling new use cases.
VPN is a complex, well-known device that has been
commonly used, which today remains the de facto norm for providing
safe remote access. On all conventional computing architectures and
smartphone operating systems, VPN has strong client support. Today,
VPNs provide support for current protocols and connect with
different systems for multifactor authentication.