We are looking to implement a DirectAccess infrastructure in our domain. However, I have a few questions/concerns regarding our existing infrastructure and how it will play with DirectAccess.
We currently have 3 sites (same domain/different subnets) interconnected using a site-to-site tunnel via Cisco ASA 5510's. This allows users from any site to access resources across any of these tunnels. The Cisco ASA is also configured for remote access VPN (which DirectAccess will be replacing). We also have other site-to-site connections to other domain sites…Again, all this is configured on our Cisco ASA's.
Since DirectAccessserver will be sitting behind as NAT firewall, would DirectAccess clients be able to connect to remote resources via the site to site VPN we have setup on our Cisco ASAs? In short, would we be able to utilize our current site to site VPN connections to work with DirectAccess clients or would this need to be completely reconfigured?