Forefront UAG DirectAccess planning guide

Updated: June 1, 2010

Applies To: Unified Access Gateway

Forefront Unified Access Gateway (UAG) DirectAccess extends the benefits of Windows DirectAccess across your infrastructure, enhancing scalability, and simplifying deployments and ongoing management. Forefront UAG DirectAccess gives remote users the experience of being seamlessly connected to your internal network any time that you have Internet access.

The Forefront UAG DirectAccess design guide is intended for use by an infrastructure specialist or a systems architect. It provides recommendations to help you plan a new Forefront UAG DirectAccess deployment based on the requirements of your organization and the particular design that you want to create. It highlights your main decision points as you plan your deployment. Before you read this guide, you should have a good understanding of your organizational requirements, and the capabilities and requirements of Forefront UAG DirectAccess.

This guide describes a set of possible deployment goals that are based on the primary Forefront UAG DirectAccess enforcement methods. It helps you determine the most appropriate enforcement method and corresponding design for your environment. You can use these deployment goals to create a comprehensive Forefront UAG DirectAccess design that meets the needs of your environment.

If you are deploying Forefront UAG with SP1, read the Forefront UAG SP1 DirectAccess design guide in the TechNet library.

Use this guide to:

• Understand Forefront UAG DirectAccess features, and the key elements and concepts of a Forefront UAG DirectAccess solution. See Introduction to Forefront UAG DirectAccess design.

• Understand the elements of a Forefront UAG DirectAccess design. See Understanding the Forefront UAG DirectAccess design process.

• Identify your deployment goals. See Identifying your Forefront UAG DirectAccess deployment goals.

• Map your deployment goals to a Forefront UAG DirectAccess design. See Mapping your deployment goals to a Forefront UAG DirectAccess design.

• Start planning your Forefront UAG DirectAccess deployment strategy. See Planning a Forefront UAG DirectAccess deployment strategy.

• Document your Forefront UAG DirectAccess design, according to your deployment strategy and the guidelines described in Documenting your Forefront UAG DirectAccess design.

This guide also provides information on:

• Planning the placement of a Forefront UAG DirectAccess server

• Planning the placement of a network location server

• Planning the placement of CRL distribution points

• Planning Forefront UAG DirectAccess with Network Access Protection (NAP)

• Planning Forefront UAG DirectAccess with an existing server and domain isolation deployment

• Capacity planning for Forefront UAG DirectAccess