We are re-evaluating our current VPN infrastructure and are trying to implement a "seamless" user experiece (with Windows 7). In my current testing I have implemented "SBL" but the process isn't seamless, the user still needs to logon to VPN first. I have also tried "Always-On" but again the user still needs to login. Is there anyway around this? Anyone else out there have a seamless experience where a user just needs to log into the machine with their standard Active Directory credentials and everything else is transparent?