Configure network services and access - Administering Windows Server 2012 R2 - page 176

On the Publish Settings page, do the following:
■ Enter a friendly name in the Name box.
■ In the Enter URL box, enter the fully qualified resource URL for the application.
■ Select a certificate from the External Certificate list. Click Next.

4.

5. Click Publish and then Close when the application publish completes.
The Windows PowerShell method for publishing an application in passthrough mode, uses
the Add-WebApplicationProxyApplication cmdlet. For example:

Add-WebApplicationProxyApplication `
-BackendServerURL "https://app.treyresearch.net/" `
-ExternalCertificateThumbprint '1a2b3c4d5e6f1a2b3c4d5e6f1a2b3c4d5e6f1a2b' `
-ExternalURL "https://app.treyresearch.net/" `
-Name "Trey App" `
-ExternalPreAuthentication PassThrough

Thought experiment

Configuring VPN protocols

In this thought experiment, apply what you've learned about this objective. You can
find answers to these questions in the “Answers” section at the end of this chapter.

You are the network administrator for TreyResearch.net. You need to deploy VPN to
support legacy remote users and non-domain-joined remote clients, including includes
both Windows and non-Windows devices. You also have users running Windows 8 and
Windows 8.1 who need to use VPN as a fallback for their DirectAccess connection.

1. What protocols provide the widest range of support for different operating sys-
tems and devices? Do you really need or want all four available protocols?

2. You currently use DirectAccess with Windows Authentication, but you want to move
to two-factor authentication for DirectAccess and VPN. What are your options?

Objective summary
■ Windows Server 2012 introduced the new combined Remote Access role that
combines Routing, VPN, DirectAccess, and Web Application Proxy.
■ A single Remote Access server can provide both VPN and DirectAccess.