Hi Cisco VPN/Anyconnect Community,
I hope you could help me on what I am trying to achieve. My goal is to force users to login/use Anyconnect so that their laptops will be patched/updated by our GPO. Below are the things we have tried but seems not workable on our current setup.
1. SBL - my colleagues mentioned to me that they tried this but cannot work because we have MFA
2. Always-On VPN - I tried this but it appears it is deleting/removing our SAML cert (this cause connection issue from Anyconnect users to the vpn server (e.g vpn.domain.com)
Now, what I am thinking is a batch file script that can be used so that I can apply it on our Anyconnect Client Profile and then once a user logs in to the vpn server (vpn.domain.com) this batch file will be deployed on the user machine and will take care of the future automatic login of the users to the Anyconnect.
Is there such thing like this? Or is there anything that you could suggest that could fit my goal?
Thank you,
John
