SBL - User Defeatable?

[kevin.fogarty]

Currently users have the ability to choose whether or not to log in via the Anyconnect window. We would like the ability to stop this,so the user has to log into VPN and cannot access any resources, websites etc, without coming in via the company website. Start before logon seems it may be a solution, but the documentation doesn't say whether the user can choose to shut the Anyconnect window and access the internet etc.

Any ideas?

[Martin Carr · Accepted solution]

SBL adds an icon on the windows logon screen, which then presents the regular Anyconnect login, it is optional whether the users select this or not.

I'm guessing your challenge is the users are going via the clientless VPN?

Martin

[kevin.fogarty]

Thanks, I thought that was the case, but wanted to confirm.