Start before Logon using ipsec

[barker2424]

Hello everyone,

I have been tasked with finding out if there is a way of enabling Start Before Logon for our VPN users.  I see that it is possible using AnyConnect but we are actually using ipsec.  We have users on both XP and Windows 7 but all should be migrated to Windows 7 in the very near future.  Sorry if this question has already been addressed before, I couldn't find it in the forums.  Thanks!

-Jay

[andrew.prince]

SBL works fine for XP and the 5.x client.  However on Windows 7 there is a different process the only way SBL works on Windows 7 is with the AnyConnect client.  The Anyconnect client is not limited to SSL - I belive you can use it in L2TP also.

[barker2424]

Thank you for the quick response, that is very helpful to know.  We have been dragging our feet on AnyConnect because of cost but this might put some more pressure on it.

[andrew.prince]

We have just bought the "AnyConnect Essentials" Licence - which was £108.0 for 2500 users!!!!

I must admit we have a VPN premium set of ASA's - but you would only really need the essentials license if the onlly function you are looking for is SBL.

You should speak to your cisco supplier - there is lots of "wriggle" room!!