Learn about the Always On VPN feature on Windows 10

One of the standout features of Windows 10 is Always On VPN. So what is it and how do you use Always On VPN? What about DirectAccess? The answer will be in the following article.

When Windows Server 2016 and Windows 10 were introduced, Microsoft also introduced a new approach that allowed Windows users to connect remotely, Always On VPN (Virtual Private Network).

When used, a VPN connection is automatically established whenever an authorized client has an active Internet connection. No user input is required - unless multi-factor authentication is enabled. Remote users have access to on-site data and applications, just as they would in an office at work.

Always On VPN replaces DirectAccess

Since Windows Server 2012 and Windows 8.1 launched, the preferred way to have remote access is to use DirectAccess. However, DirectAccess is a bit difficult to apply and manage for some organizations. Therefore, they choose to use third-party alternatives like Cisco AnyConnect or maybe even LogMeIn.

Always On VPN replaces DirectAccess

Always On VPN makes it easier for Windows users to remotely access with Microsoft's own solution - and Microsoft is actively encouraging organizations to use Always On VPN instead of DirectAccess.

Support for IPv6 and IPv6

One of the great things about Always On VPN is that it supports integration for both IPv4 and IPv6. Because Always On VPN supports the Extensible Authentication Protocol (EAP), it also allows the use of other types of Microsoft and third-party EAPs as part of the authentication process. This includes support for physical and virtual smart cards or Windows Hello for Business certificates to meet two-factor authentication requirements.

How to deploy Always On VPN in the organization

Although Always On VPN is supposed to be easier to manage than DirectAccess and is presented as a user-friendly VPN, it still requires some network configuration, settings and knowledge to deploy in an organization. function. Microsoft has written a deployment guide. You can refer to at:

 https://docs.microsoft.com/en-us/windows-server/remote/remote-access/vpn/always-on-vpn/deploy/always-on-vpn-deploy-deployment 

. or contact a third party, if the configuration of your VPN server infrastructure, remote access server, and DNS settings sounds a bit overwhelming to you.

Always On VPN is said to be easier to manage than DirectAccess

Azure integration

There is one important thing to keep in mind: Always On VPN is a client-only solution for Windows 10. Unlike DirectAccess, however, client devices do not have to run the Enterprise edition to take advantage of Always On VPN. Windows 10 Professional and Windows 10 Home are also supported clients.

While DirectAccess requires Windows servers before you can deploy this feature in your organization, Always On VPN can be used in conjunction with any third party VPN device.

Another interesting feature of Always On VPN is the ability to integrate cloud with Azure Active Directory, where you can take advantage of Microsoft Azure Conditional Access.