Force VPN-Client always connect while VPN by using Firepower NGFW

[quangle1993]

Hi everyone,

I want to ask that , is there a way to force VPN Client of Firepower Firewall always connect VPN everytime VPN client on user machine detect that computer have Internet connection. If not enable the option "Always connect", then it cannot connect to VPN.

Thanks!

[Marvin Rhoads · Accepted solution]

If you deploy the Start Before Logon (SBL also known as vpngina) AnyConnect module it will do that for you.

https://www.cisco.com/c/en/us/td/docs/security/firepower/config_examples/advanced-anyconnect-ftd-fmc/advanced-anyconnect-vpn-ftd-fmc.html#Cisco_Task_in_List_GUI.dita_12b746da-3ace-4ba0-91b0-a56e78e36ac3