36.4 Pre-VPN Location

As soon as the Internet is detected, the location switches from the Trigger location to the VPN location. In some situations, going directly to the VPN location might enforce security policies that prevent the device from establishing a VPN connection.

For example, many businesses, such as hotels and motels, use semi-public networks that provide minimal Internet access until the user logs in or accepts a usage agreement. Immediately switching to the VPN location might enforce security policies that prevent the user from completing the login or agreement. To resolve this issue, you can use a Pre-VPN location with security policies that allow the user to perform the required activities and gain the full Internet access required to establish the VPN connection.

Using a Pre-VPN location is optional. To use a Pre-VPN location, select Use a Pre-VPN location, then fill in the following fields:

  • Pre-VPN Location: Select the location you want to use for the Pre-VPN location. This can be any location other than the one you plan to use as the VPN location.

  • Exit Criteria: The exit criteria determines when the Pre-VPN location switches to the VPN location. You can use one or both of the following options:

    • Switch from the Pre-VPN location to the VPN location when VPN traffic is detected: This option applies only if you’ve enabled VPN detection. Select this option to switch as soon as a VPN traffic is detected.

    • Switch from the Pre-VPN location after XX minutes: Select this option to switch after a specific amount of time, then specify the time in minutes (the default is 5 minutes).