Hi,
With AnyConnect 4.7, is it possible to apply an equivalent of the always on VPN “connection fail closed” policy to a Management Tunnel / User tunnel setup?
I’ve been testing the new mgmt tunnel feature, and have found that in a captive portal negotiation scenario, a user is able to access the internet in between the VPN switching from management tunnel to user tunnel (when at user tunnel auth prompt).
My requirement is to deploy a secure / always on / no split tunnel solution, with minimal user interaction hence the question.
Always on VPN is the alternative, but presents user context complications (i.e, we don’t want to extend user beyond log off).
Any ideas?
Thanks.
