disconnecting VPN during login after Windows lockup

I have a problem with VPN IPSec/IKEv2 with domain user authentication. The tunnel itself and the connection to it work fine, the only problem occurs when the user is blocked and logs in again using prelogon. On the first login attempt, the message “unable to connect to VPN...” appears. , and on the second attempt does it connect to the VPN and log me into Windows. However, the VPN itself disconnects for a few seconds, forcing me to log back into the application and servers. Is there a way to allow prelogon VPN to log in after blocking a user without disconnecting from the VPN?