Is there any way to disable the automatic downloading of the AnyConnect client when users access the vpn gateway from a browser? What we are trying to accomplish is restricting VPN access to specific users on specific hardware, and allowing users to download and install the client on any machine they log into is not what we want.
Is there any way to enable two levels of authentication so that the username/password must be valid and the machine certificate must be valid before the vpn will run? This is a workaround that would allow them to download and install the client, but it wont connect unless the machine has the correct certificate.
