Hi All, I'm hoping someone here will be able to help out. We have just finished implementing UAG DirectAccess, only trouble is we can't get it to work properly, it half works.. I am able to access ipv6 resources from the client pc over the internet, however only via ping, which i understand is not sent as part of the IPSEC tunnel.. so i decided to troubleshoot the IPSEC side of things, I noticed that no tunnels were being initiated in the monitoring section of the windows firewall.. so I thought this must be down to the certificate being used to chain ipsec, but this all seems correct, the CA that issues the computer certificate is the same as the one being used in the wizard.. so I am pretty stuck now.. can someone provide me with some information as to why this won't work? I feel like i've spent a lifetime on it now :) also, should it matter that we don't use a split brain DNS? our internal suffix is .local ... just a thought. Any help would be greatly appreciated. Regards, Andrew

Hi, As this forum focuses on Windows Vista specific issues, this inquiry would best be posted to Forefront Edge Security forum: http://social.technet.microsoft.com/Forums/en-US/category/w7itpro The reason why we recommend posting appropriately is you will get the most qualified pool of respondents, and other partners who read the forums regularly can either share their knowledge or learn from your interaction with us.Thank you for your understanding. Regards,Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.