The VPN Client configuration option Stateful Firewall (Always On), available in versions 3.5.1 and later, can be activated on the VPN Client. This configuration option is not negotiated. The policy is not controlled from the VPN Concentrator.
To enable the stateful firewall option on the VPN Client, select it from the Options menu. Or, when the VPN Client is in use, right-click the VPN Client icon and select the option.
To disable this option, deselect it.
An administrator can preconfigure the VPN Client so that this option cannot be altered by the user.
For more information, see Configuring VPN Client Firewall Policy.
How to (General Information)
VPN - hardware & software clients
VPN Client Software Version
Features & Tasks