establish VPN before the windows login?

[JohnJames001]

My requirements are for remote users to be able to log directly onto a domain from the intial Windows logon screen.

Obviously a VPN needs to already be established for this to happen, running as a service with a Pre-Shared key or something.

I have a test SSL VPN working with the Anyconnect client, but a user needs to log onto Windows first to establish that?

I see references to something called "Start Before Logon (SBL)", but that seems kludged together and poorly documented, plus I'm not sure its even what I need.

I'm using ASA v 9.1, and I have Anyconnect Premium licenses.

Can anyone point me in the right direction?

Thanks!

[Javier Portuguez]

Hello John,

Yes, you are correct.

SBL is meant for your requirement.

I think this doc is pretty clear:

ASA 8.X: AnyConnect Start Before Logon Feature Configuration

Let me know if you have any question.

HTH.