IPsec VPN Auto-Connect before logon

[matthewleealtecnic]

Afternoon all,

Looking for a bit of help regarding the FortiClient & IPsec VPN tunnels. 

We have a problem with users not connecting to the VPN regularly, so we've taken the decision to force them to connect. I've tested this feature through our EMS & FortiClient and the auto-connect works, however, there are a couple of issues.

Firstly, the Windows 10 login page allows the user to choose either the Fortinet Sign-On or the standard sign-on through the "Sign-In Options" button. This would allow users to bypass the auto-connect & prevent them from getting policy updates within a decent time frame.

Secondly, if the user has no network connection, then they can't actually log in and access their desktop. This makes sense, as without a network connection, they can't connect to the VPN.

Is there a way that I can force the user to connect to the VPN, without giving them another logon option, however, when there's no network connection, allow the user to log in & have the VPN connect when it detects a network connection?

Thanks in advance!