The DirectAccess Deployment Guide has been updated with the following topics that describe how to move the Internet Protocol security (IPsec) gateway function of a default-configured DirectAccess server to another computer:

·         Checklist: Moving the IPsec Gateway to Another Server

·         Configure the Intra-Server Subnet

·         Configure the IPv6 Connectivity Server

·         Configure the IPsec Gateway Server

You can move the IPsec gateway function to another computer with IPsec offload hardware, which can handle the processor-intensive cryptographic operations and support many IPsec tunnels. For additional details, see Capacity Planning for DirectAccess Servers.


Joe Davies
Principal Writer
Windows Server Documentation Team