CESG guidelines state that corporate clients must connect to a VPN before accessing LAN resources.
Direct Access 2012 seems to be the solution for 7 and 8 Enterprise, we need a similar seemless connection experience for XP as our estate will be on XP for the next 6 months. Will we need to use the VPN feature on DA2012 and then pass XP clients to a UAG server?