topic Network Access Manager and WiFi in Network Access Control

Network Access Manager and WiFi

Alex Pfeil — Mon, 11 Mar 2019 03:26:09 GMT

I have a computer that is a member of a domain. The computer has Network Access Manager and Cisco Secure Mobility Client VPN modules loaded. I have the computer setup to authenticate to the network before it connects to the domain. This is working fine.

When a user brings their computer home, they are unable to connect to their wireless network. I tried adding some wifi authentication in Network Access Manager, but that did not fix the issue. I am still going to do some reading up on this issue, but I was hoping that somebody could give me some input if they have any experience?

I need for people to be able to authenticate to the network when they are at work, and VPN when they are at home.

Thanks,

Alex Pfeil

Network Access Manager and WiFi

Jatin Katyal — Wed, 15 May 2013 12:21:22 GMT

You mean you have start before feature (SBL) enabled and its working fine as long as you're at work. I guess I have seen this before.

What I read in an internal enhancement request that Cisco AnyConnect 3.0 Start Before Logon (SBL) does not work with user created personal networks. NAM establishes connections with user created network profiles only after user logon, and consequently there will be no network connectivity at the time Start Before Logon executes.

What version of NAM are you using?

Jatin Katyal
- Do rate helpful posts -

Network Access Manager and WiFi

Alex Pfeil — Wed, 15 May 2013 12:37:03 GMT

The VPN is not being used at work. Just the Network Access Manager. Start Before Logon VPN module is not installed on the computer.

At home, the user can login to the computer using cached credentials, but then they cannot connect to the wireless network because of the (I think) NAM.

Network Access Manager and WiFi

jonathanhicks — Wed, 15 May 2013 13:58:29 GMT

Is the user using the AnyConnect client to connect to their wireless network?

Network Access Manager and WiFi

Alex Pfeil — Wed, 15 May 2013 14:11:20 GMT

No, the way that I am trying to set it up is:

a user should be able to login to their computer
connect to their wireless network
and then start the VPN.

I was thinking that the NAM should not be involved since their wireless network is not setup to require authentication.