#sam reid#interview with the vampire#the vampire lestat#iwtv
seen from Germany
seen from Colombia
seen from United States
seen from United States
seen from Malaysia
seen from United States
seen from United States
seen from China
seen from Thailand
seen from Australia
seen from China
seen from Italy
seen from South Korea
seen from Belgium
seen from Switzerland
seen from Switzerland
seen from Switzerland
seen from Switzerland
seen from United States
seen from United States
DirectAccess Fails on Windows 11 24H2
Microsoft recently released Windows 11 24H2. Not long after the release there have been numerous reports of DirectAccess failing after performing an in-place upgrade from previous versions of Windows 11. New installations of Windows 11 24H2 experience the same problem. Testing After downloading and configuring a Windows 11 24H2 test client I was able to quickly reproduce the issue. While…
View On WordPress
DirectAccess Get-NetIPHttpsState Fails on Windows 10 1803
DirectAccess Get-NetIPHttpsState Fails on Windows 10 1803
PowerShell is an essential tool for Windows administrators for configuration, task automation, monitoring, reporting, and problem resolution. When troubleshooting DirectAccess connectivity using the IP-HTTPS IPv6 transition technology, the Get-NetIPHttpsConfiguration and Get-NetIPHttpsStatePowerShell commands are important for assessing the configuration and current state of the IP-HTTPS…
View On WordPress
DirectAccess IP-HTTPS and Symantec SSL Certificates
DirectAccess IP-HTTPS and Symantec SSL Certificates
An SSL certificate is required to support the IP-HTTPS IPv6 transition technology when configuring DirectAccess. Implementation best practices dictate using a public SSL certificate signed by a trusted third-party vendor such as Entrust, Verisign, DigiCert, and others. SSL certificates issued by a private PKI are acceptable if the client trusts the issuing CA. Self-signed certificates are…
View On WordPress
DirectAccess IP-HTTPS Null Cipher Suites Not Available
Microsoft first introduced support for null cipher suites for the IP-HTTPS IPv6 transition technology in Windows Server 2012, and it is supported for DirectAccess in Windows 8.x and Windows 10 clients. Using null cipher suites for IP-HTTPS eliminates the needless double encryption that occurs when using encrypted cipher suites. DirectAccess is a unique workload where SSL/TLS encryption isn’t…
View On WordPress
Top 5 DirectAccess Troubleshooting PowerShell Commands
Top 5 DirectAccess Troubleshooting PowerShell Commands
Native PowerShell commands in Windows 10 make DirectAccess troubleshooting much easier than older operating systems like Windows 7. For example, with one PowerShell command an administrator can quickly determine if a DirectAccess client has received the DirectAccess client settings policy. In addition, PowerShellcan be used to view the status of the connection and retrieve additional information…
View On WordPress
IPv6 Recommend Reading
DirectAccess uses IPv6 exclusively for communication between the DirectAccess client and server. The DNS64 and NAT64 services running on the DirectAccess server allow the client to connect to IPv4-only resources on the corporate network. Although no IPv6 knowledge is necessary to implement DirectAccess, it is most certainly required to support it going forward. A fundamental understandingof IPv6…
View On WordPress
DirectAccess IP-HTTPS Discovery Script for Nmap
DirectAccess IP-HTTPS Discovery Script for Nmap
When troubleshooting DirectAccess connectivity issues, the popular Nmap network mapping and discovery tool is an invaluable resource for verifying the communication path to the DirectAccess server from outside the network. However, just verifying that ports are open and listening often isn’t sufficient. In the case of IP-HTTPS, for example, the tried and true method of using telnet to verify that…
View On WordPress
Disable 6to4 IPv6 Transition Protocol for DirectAccess Clients
Disable 6to4 IPv6 Transition Protocol for DirectAccess Clients
Introduction
DirectAccess client to server connections are established exclusively over IPv6. To allow for this communication to take place over the public IPv4 Internet, DirectAccess uses IPv6 transition protocols – 6to4, Teredo, and IP-HTTPS – to tunnel IPv6 communication over IPv4. 6to4 is supported when the DirectAccess server is edge facing with a public IPv4 address assigned to its external…
View On WordPress
