To start the tunnel BEFORE you login with domain-credtials to your windows pc.
Then, after the vpn tunnel is established, you can logon directly into your Active Directory domain
is it possible with Mobile access or IPsec vpn ?
Definitely possible with Endpoint Security, check out the Secure Domain Logon (SDL) feature. I don't believe it is possible with the MAB if you are just doing a bare-bones SNX tunnel, client-side software is required for SDL.
-- My book "Max Power: Check Point Firewall Performance Optimization" now available via http://maxpowerfirewalls.com.
Retrieving data ...