The DirectAccess server is an access gateway by which remote users can access resources on the internal network. As such, it makes an appealing target for attackers. It is vital that the DirectAccess server is properly secured to ensure that it is not compromised.
In addition to common security implementation best practices, careful attention should be given to some of the default settings for the IP-HTTPS IPv6 transition technology, the SSL/TLS configuration, and the Windows firewall. Service hardening and attack-surface reduction can ...
