Perimeter Firewall Exceptions

If your corporate network has a perimeter firewall, the following traffic to and from the DirectAccess server over the IPv4 Internet must be allowed:

• UDP port 3544 for Teredo traffic
• IPv4 protocol 41 for 6to4 traffic
• TCP port 443 for IP-HTTPS traffic

If you need to support client computers that connect over the IPv6 Internet, the following traffic to and from the DirectAccess server must be allowed:

• Internet Control Message Protocol version 6 (ICMPv6)
• UDP port 500
• IPv4 protocol 50

Smart Cards

DirectAccess also supports the optional use of smart cards for authenticating remote users.