Who Me Too'd this topic

I’m looking at switching GP from User (Always On) to Pre-Logon (always On).

Current setup is one firewall serving as both the portal and gateway. I’m doing both username/password with client user certificates for multiple authentication factors, as this is a requirement.

I deployed a computer cert to test Pre-Logon but it doesnt seem to work as expected it too. I thought it would be like a competitor’s “secure domain login” feature. I want to establish the VPN connection prior to login but I also want to make use of username/password. Also, the vpn connection must be always on. Pre-logon with OnDemand is not an option.

Is this possible?