SOLVED: What is CONNECT BEFORE LOGON and Which VPN Clients Allow It
“Connect Before Logon” is a feature offered by some VPN clients that allows users to establish a VPN connection before logging into their Windows account. This is particularly useful in corporate environments where access to network resources and Group Policy Objects (GPOs) is required at logon. Here’s how it works and why it’s beneficial:
How Connect Before Logon Works
Pre-Logon VPN Connection: The VPN client is configured to prompt for a VPN connection on the Windows logon screen
Authentication: Users authenticate to the VPN using their credentials (e.g., username/password, smart card, or other methods)
Network Access: Once the VPN connection is established, the user can log in to Windows with their domain credentials, allowing access to network resources and applying GPOs
Benefits of Connect Before Logon
Access to Network Resources: Users can access shared drives, printers, and other network resources immediately upon logging in
Group Policy Application: Ensures that GPOs are applied during the logon process, which is crucial for settings like folder redirection
Password Synchronization: Helps in scenarios where users need to change their domain password, ensuring the new password is synchronized with the domain
VPN Clients Supporting Connect Before Logon
Windows Built-in VPN Client: You can configure the built-in Windows VPN client to connect before login by creating a shared VPN connection using PowerShell. This involves using the Add-VpnConnection cmdlet with the -AllUserConnection parameter
FortiClient: FortiClient supports VPN connections before Windows logon. You can enable this feature in the FortiClient settings
Cisco AnyConnect: Cisco AnyConnect offers a “Start Before Logon” (SBL) feature that allows users to establish a VPN connection before the Windows logon dialog appears
Pulse Secure: Pulse Secure offers a “Pre-Logon” feature that allows users to establish a VPN connection before logging into Windows, ensuring access to network resources and policies
SonicWall NetExtender: SonicWall’s NetExtender client supports pre-logon VPN connections, enabling users to authenticate and connect to the corporate network before logging into their Windows account
Check Point Endpoint Security VPN: This client provides a “Connect Before Logon” feature, allowing users to establish a secure VPN connection before accessing their Windows desktop
OpenVPN: With proper configuration, OpenVPN can be set up to connect before logon, providing secure access to network resources during the Windows logon process
BIG-IP Edge Client: The BIG-IP Edge Client from F5 Networks can be configured to prompt users to establish a VPN connection before accessing their Windows account
