Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

ASA Windows7 and Start-Before-logon (SBL) Issues

We are attempting unsuccessfully to get Windows7 SBL working with the following configuration (SBL works for XP);

ASA5520

ASA 8.0(4)

ASDM 6.1(5)

AnyConnect 2.4.1012

License VPN Plus (SSL VPN Peers 100)

When configuring Group Policy for Optional Clent Module to download we only have option for vpngina and cannot see Start Before Logon (SBL) module as referenced in AnyConnect Client 2.4 documentation.

Is this a license type issue or do we need an upgrade to ASA/ASDM software ?

Thanks in advance for your help.

Everyone's tags (1)
1 ACCEPTED SOLUTION

Accepted Solutions
Cisco Employee

Re: ASA Windows7 and Start-Before-logon (SBL) Issues

The following doc can be referenced regarding the rest of the SBL setup:

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00809f0d75.shtml

6 REPLIES
Cisco Employee

Re: ASA Windows7 and Start-Before-logon (SBL) Issues

You can use vpngina for the same purpose.

I believe the command has changed in later versions from vpngina to Start Before Login to be more intuitive.

Let me know if you have any further questions regarding this.

New Member

Re: ASA Windows7 and Start-Before-logon (SBL) Issues

Thanks Rosalaza,

We have our Group policy set for vpngina and SBL set to True in the profile and did see an AnyConnect SBL module downloaded.

However on rebooting the Windows7 laptops - after Switch User selected - we do not see the Network Connect button (in lower-right corner of window) to launch AnyConnect Client.

Cisco Employee

Re: ASA Windows7 and Start-Before-logon (SBL) Issues

You may want to check if the profile has been pushed to that pc:

   C:\ProgramData\Cisco\Cisco AnyConnect VPN Client\Profile

If the profile is loaded in that directory, what icons do you see at the bottom right hand corner?

-Rob

New Member

Re: ASA Windows7 and Start-Before-logon (SBL) Issues

Thanks Rob,

Looks like the issue, I can't see the profile in that location.

Will work through the document in link you gave me to see if it resolves my issue, and post results back here.

Cisco Employee

Re: ASA Windows7 and Start-Before-logon (SBL) Issues

The following doc can be referenced regarding the rest of the SBL setup:

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a00809f0d75.shtml

New Member

Re: ASA Windows7 and Start-Before-logon (SBL) Issues

Thanks Rob,

Now have SBL working for Windows7 - just some dns issues to resolve now.

5452
Views
0
Helpful
6
Replies