So that wraps up this module on advanced configuration.
We covered a lot of complex topics,
specifically around the areas of name resolution and NRPT configuration.
You saw that are Always On VPN clients adopt their DNS server from the
DNS server assigned to the VPN server, and, of course, you learned
that in some cases that may not be ideal,
it may not even work.
So if your DNS servers are defined as a public DNS server on the VPN server,
then obviously that's not going to be capable of resolving those
internal Active Directory domain names, and so that causes some
problems for Always On VPN clients, and you can get around that by
enabling the NRPT. The proxy server settings you saw that we configured
may be helpful in those scenarios where you might have to route traffic
through a proxy. You know, again, as I had stated previously,
proxies are not super common today and they're certainly less common than
they used to be, but they're still in place in in organizations around the
world, based on my experience at least, and so if you have an occasion to
route traffic through a proxy for, you know,
content filtering and inspection and things like that, Always
On VPN supports that in a variety of ways.
There's a couple of different ways, as you saw.
And then finally, we implemented some zero trust network access policies
using application and traffic filtering. You saw that it can be fairly
easy to set up a basic traffic filter rule,
but you also probably got the sense that adding the more granular access
controls and restrictions is a little more challenging.
The Intune UI has some limitations that prevent you from really getting
down deep and controlling access at a fine‑grain level.
But again, as I demonstrated,
you can do that with the XML, and it's just some additional code that
you add to your XML configuration file that you would push out to your
clients, and, of course, you can do that with either Intune or using
PowerShell and SCCM or something else. So join me for the next module where we configure Always On VPN in Azure.