Windows Server® 2008 Networking and Network Access Protection (NAP)

Planning and Design Considerations

When deploying a remote access VPN solution, you must consider the following planning and design issues:

• VPN protocols

• Authentication methods

• VPN servers

• Internet infrastructure

• Intranet infrastructure

• Concurrent intranet and Internet access for VPN clients

• Authentication infrastructure

• VPN clients

• PKI

• VPN enforcement with NAP

VPN Protocols

Windows Server 2008 includes support for the following remote access VPN protocols:

• PPTP. PPTP uses PPP user authentication and MPPE encryption. When Microsoft Challenge Handshake Authentication Protocol (MS-CHAP v2) or Protected EAP (PEAP)-MS-CHAP v2 is used with strong passwords, PPTP is a secure VPN technology. For certificate-based authentication, Extensible Authentication Protocol-Transport ...