By default, DirectAccess requires IPsec authentication and encryption between the DirectAccess client and server. In addition, ...

By default, DirectAccess requires IPsec authentication and encryption between the DirectAccess client and server. In addition, you can optionally require end-to-end authentication and encryption between DirectAccess clients and selected internal application servers.