Start Before Login On First Use?

[webabc123]

We have SBL configured, but the user's don't have the option to use it until someone logs into the PC and has used the AnyConnect client inside of Windows and then the SBL activation settings are downloaded from the ASA.

How can we configure a new installation so that SBL access from the Windows login screen is available from the very first use of a new computer?

[JP Miranda Z · Accepted solution]

Hi webabc123,

The only way to do that will be manually deploying the SBL and the .xml into the computer before the client connects for the first time.

The xml should be on the following path on windows:

%ProgramData%\Cisco\Cisco AnyConnect Secure Mobility Client\Profile

And you can download the SBL module from cisco.com:

Full installation package - Window / Standalone installer (ISO). Includes installation packages for DART, NAM, Core/VPN, Phone Home, Hostscan, ISE Posture, and WebSecurity components. 

https://software.cisco.com/download/release.html?mdfid=286281272&catid=268438162&softwareid=282364313&release=3.1.14018&relind=AVAILABLE&rellifecycle=&reltype=latest

Hope this info helps!!

Rate if helps you!! 

-JP-