So that brings us to the end of this module on provisioning Always On VPN
clients. Got quite a bit accomplished in this module if I don't say so
myself. We set up some initial connectivity tests,
we set up our test client, and again,
configured that VPN profile manually. As a part of that
profile validation, we, if you'll recall, that we made sure
that all of our routes were in place,
made sure that we configured the IPsec policy to align with the VPN server,
don't forget that critical aspect. And, of course, the
critical point here is that before you push this
configuration profile out to the masses,
we want to make sure that everything's working,
we just built this new infrastructure and we want to make sure
that everything's functioning as expected, so that's really the
important process there. Also,
it does provide you the ability to extract that EIP configuration that
you're going to use when you deploy the settings using Intune, or whether
you're deploying those using XML because you'll need that information to
build out those profiles on either platform.
And finally, you know,
we took a look at the VPN provisioning options, as you saw. Intune is
probably, Intune is definitely the best way to go, but it is certainly
easier, and more effective, and more efficient, has the best
administrative experience, it is the path of least resistance for you as
administrators when provisioning and manage Always On VPN, definitely
consider using Intune. But again, as you saw,
it is not the only option,
so you, if you plan to use something like SCCM, or PDQ, or any
variety of non‑Microsoft systems management platforms that can
push out PowerShell scripts effectively,
then you certainly can take advantage of the PowerShell options with the XML
configuration file and push those out using our tools,
specifically the AOVPN tools PowerShell module and using the
new AOVPN connection PowerShell function in that module. It
will make your life a lot easier.
And again,
you can deploy both device tunnels and user tunnels using
PowerShell, using the function in that PowerShell module.
So moving on,
let's get to the next module where we're going to talk about some advanced configuration options.