Jul 12, 2018 To authenticate before login? I can tell you that the SSL VPN is a customized version of OpenVPN - so finding an OpenVPN solution that would connect systems before login should work with the Sophos solution - you'll just have to download the config and certificates for the user, instead of the entire install package.
What are you using to support the remote systems? My support package doesn't require a LAN or VPN connection to reach them - though if you're using remote desktop or VNC and combo with AD GPO delivery I can see the need.
Sophos Vpn Client Download
I can tell you that if a user's session is logged into a Sophos SSL VPN and you have fast user switching enabled, the admins can login with their admin session and log off without having to touch the user's session. To authenticate before login? I can tell you that the SSL VPN is a customized version of OpenVPN - so finding an OpenVPN solution that would connect systems before login should work with the Sophos solution - you'll just have to download the config and certificates for the user, instead of the entire install package. User can do this themselves at the User Portal, or you can do it in Web Admin in the Users area.
Sophos Vpn Client Install
The UTM9 can also be configured with LT2P over IPSec or PPTP VPN connections to laptops, but you'll have to configure RADIUS on the Windows servers to work that way if you want user/pass for vpn to be synchronized with their Windows password. Then you can continue to use the Microsoft client.
