Remote Access VPN Secure Domain Logon Choice

[mkoessler]

Hi everyone,

a customer of ours uses the standalone Remote Access VPN Client with Secure Domain Login configured. When SDL is enabled, the user can only log in to windows with VPN. Is there a way, that the user can choose to connect to VPN or authenticate to Windows locally, as it´s possible with Cisco AnyConnect (picture below)?

Thanks 🙂

[_Val_]

Amin note: credits removed

[_Val_]

From the documentation (important part highlighted):

Secure Domain Logon ensures that authentication credentials sent to the Domain Controller are sent through an encrypted channel.

If you do not need that, disable SDL.

[mkoessler · Accepted solution]

Hi all,

just wanted to share my solution for this. Our partner manager hinted us to the implicit and explicit SDL configuration.

https://sc1.checkpoint.com/documents/RemoteAccessClients_forWindows_AdminGuide/Content/Topics-RA-VPN...

Through disabling implicit SDL the user now has a button in the Windows login screen where he can choose to connect to VPN or just log in to the client.