Prelogon VPN

Question

Hi Guys, 
 
 we need an VPN Client which conntects to our Sophos (here XG, but some Customers have UTM) Boxes before the Users log on on thier Windows Clients. 
 I think this is named: Prelogon VPN. 
 I know Paloalto's VPN Client does have such functionality. 
 This is usefull for Computer - GPO's and locked Windows Accounts. 
 
 Do anyone know which VPN Client does have this functionality which is compatible to Sophos XG/UTM? 
 
 sincerly 
 Guenter

LuCar Toni · Accepted Answer

There is no VPN Client by Sophos, which can perform such a task. 
 As far as i know, the greenbow and NCP (IPsec) can use this kind of tweak. Personally i call this a tweak / hack, because they manipulate the msgina binaries. https://en.wikipedia.org/wiki/Graphical_identification_and_authentication 
 Sophos Connect could run a Script after logging in. 
 GPOs could be run via script after logging in. The Locked account scenario is tricky - I know.