Question on Anyconnect and Service Before Login (SBL)

[hurricane05]

We currently use the Cisco AnyConnect VPN for our users but we do not have Service Before Login (SBL) setup and configured for use. My question is on testing this out to see how it works. Can I simply extract the gina .msi package installation from the .zip file from Cisco download, install that on my laptop and be able to test logging into the Active Directory domain or do I have to make some additional configuration changes on the ASA side to support this first before testing?

Thx in advance for any assistance given.

[Rob Ingram · Accepted solution]

@hurricane05 

You will also need to modify the AnyConnect profile on the local machine to enable SBL, you can do this using the AnyConnect Profile Editor. You can either copy the updated profile to the ASA or save in the correct location on the local computer.

Guide here.

[hurricane05]

Thx for quick response on this as the document was very helpful.