Win 10 VPN Update

[Uberseehandel]

MS have just sent out a bulletin explaining that they have reworked VPN to make better use of Win 10 profiles. Here is the url

 https://www.microsoft.com/en-us/itshowcase/enhancing-remote-access-in-windows-10-with-an-automatic-v... 

[PhilipDAth]

Ta-da.  That is exactly what my tool uses to build client VPNs for Meraki.

https://www.ifm.net.nz/cookbooks/meraki-client-vpn.html 

[Uberseehandel]

@PhilipDAth 

What do they say about great minds? 😎

[SoCalRacer]

@PhilipDAth is there a way to configure the profile to be auto-on?

[PhilipDAth]

If it wasn't using PAP - yes, but we have to use PAP.  Windows won't allow PAP credentials to be persistently stored, so auto-on doesn't work.

[Uberseehandel]

@PhilipDAth 

I don't know if its any help, but I have come across password managers that integrates with Azure Active Directory Services, which is compatible with Windows Active Server Directory, which means (bear with me), LDAP is available, and when I look at the Cisco CEPM Guide , it seems that we might be able to address the PAP storage issue. We would have to do some work . . . 

[PhilipDAth]

Good thinking @Uberseehandel  but alas as @SoCalRacer mentions, Meraki will only accept PAP authentication, and Windows wont allow a PAP password to be saved, which prevents always-on.

[SoCalRacer]

Possibly if AnyConnect gets implemented then we might have a chance.

[SoCalRacer]

Isn't all Meraki Client VPN PAP?