topic Re: Anyconnect start before login SBL in Network Security

Anyconnect start before login SBL

michael.stuckey1 — Fri, 11 Feb 2022 16:15:07 GMT

I am trying to find a solution to prevent login to a computer before the VPN anyconnect connection is completed. Has anyone found a solution for this? My platform is Cisco ASA5508X FTD configured by FMC. I am on version 6.6.5.

Any suggestions?

Re: Anyconnect start before login SBL

MHM Cisco World — Fri, 11 Feb 2022 16:44:20 GMT

From anyconnect client preference,

Just disable start before login

Re: Anyconnect start before login SBL

michael.stuckey1 — Fri, 11 Feb 2022 17:15:32 GMT

I want to prevent login to the computer. Currently I have the "choice" to SBL and also to be able to login to computer. This is what I want to stop. I have not been able to force SBL.

Re: Anyconnect start before login SBL

Aref Alsouqi — Sat, 12 Feb 2022 18:37:24 GMT

I think you can achieve that by disabling the "User Controllable" option on AnyConnect profile. In that case the users would see the AnyConnect window, and only after they log into the VPN they would see the Windows logon screen. However, it is not always advisable, for example if the users should be connected to a wireless network then they would need the wireless connection to be completed before they can connect to the VPN. To fix this issue you would need to enable the credentials caching for the wireless connection.

Re: Anyconnect start before login SBL

michael.stuckey1 — Sun, 13 Feb 2022 20:12:29 GMT

I want start before login.

Re: Anyconnect start before login SBL

michael.stuckey1 — Sun, 13 Feb 2022 20:13:35 GMT

I will look closer at the xml file and see what I can do here.