Solved

Microsoft DirectAccess + Surface Pro 4s

Posted on 2016-08-16
6
40 Views
Last Modified: 2016-08-22
Hello All --

I am trying to test out DirectAccess with our Surface Pro 4 tablets.  I've gotten everything setup and it even connects via IP-HTTPS as per the screenshot:

Capture.PNG
I tried a few troubleshooting tools and guides (making sure domain firewall profile is applied to the internal network interface, pulling logs from the client, making sure port 443 is open on the firewall, etc) with no success.  It seems like the client is able to successfully connect but no data is being returned.  

Back tracking a bit, we have the following environment.  

Environment:
DirectAccess Server (Windows 2012 R2, 2 Network Interfaces with 1 DMZ and 1 Internal)
 * Public GoDaddy cert for IP-HTTPS
 * Self-signed the NLS
DirectAccess Client (Surface Pro 4 with Windows 10 Enterprise)
Cisco Meraki Environment (IPv4 only)

The only thing I can think of now is that it doesn't work in our environment since we have an IPv4 only environment.  The meraki firewall (MX) only passes IPv6 traffic in passthrough mode (which it is not).  However, when i'm reading the articles online, it appears that IPv6 just has to be enabled on the client and not the internal environment itself for DirectAccess to work.  Any one can clarify?  Any other troubleshooting steps I can take?

Thanks!
0
Comment
Question by:Edward Cho
  • 4
  • 2
6 Comments
 
LVL 56

Expert Comment

by:Cliff Galiher
Comment Utility
DirectAccess does not support software that requires IPv4 end to end. The client end must not only have IPv6 enabled, but any software on the client end must also support IPv6. On the server end, if you are not gong to use IPv6, you must configure some sort of 6 to 4 topology.
0
 
LVL 3

Author Comment

by:Edward Cho
Comment Utility
Thanks for the reply.  

I thought Server 2012 direct access server has built-in NAT64 and DNS64 support for accessing IPv4-only resources so I would think it's possible to have an IPv4 corp network only?
0
 
LVL 56

Assisted Solution

by:Cliff Galiher
Cliff Galiher earned 500 total points
Comment Utility
On the server side, yes (assuming your infrastructure is properly set up.) but client software still requires IPv6 support as NAT64 is not running on the client side. Lync 2010 was a perfect example of software that didn't run over directaccess because the client didn't support IPv6.
0
Highfive Gives IT Their Time Back

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

 
LVL 3

Author Comment

by:Edward Cho
Comment Utility
Gotcha but I should still be able to ping servers (including the DA server) and/or access file shares?  I am unable to do so and the W10 Enterprise client is stuck on this screen:

Capture.PNG
0
 
LVL 3

Accepted Solution

by:
Edward Cho earned 0 total points
Comment Utility
Found out that the Surface Pro 4 I was testing with had issues with the Windows Firewall.  Reset Windows Firewall and everything started working.
0
 
LVL 3

Author Closing Comment

by:Edward Cho
Comment Utility
Solved my own problem.
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

I recently attended Cisco Live! in Las Vegas, a conference that boasted over 28,000 techies in attendance, and a week of hands-on learning hosted by a solid partner with which Concerto goes to market.  Every year, Cisco displays cutting-edge technol…
The recent Microsoft changes on update philosophy for Windows pre-10 and their impact on existing WSUS implementations.
In this Micro Tutorial viewers will learn how to use Boot Corrector from Paragon Rescue Kit Free to identify and fix the boot problems of Windows 7/8/2012R2 etc. As an example is used Windows 2012R2 which lost its active partition flag (often happen…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

9 Experts available now in Live!

Get 1:1 Help Now