Hi all,
What are you guys using for Always-On VPN at boot? I see some various solutions but I’m looking for a VPN that can deal with Windws Server RRAS or Remote Access, SonicWall, Meraki and other VPN’s.
Don’t like the idea to be vendor-locked with this so if anyone has suggestions?
Thanks! 
I’m still using DirectAccess, works fine for me so no plans on changing
I’ve got clients using wireguard, not hand an issue with it with a year or two of usage under our belts, just works.
I use ZeroTier for projects/always on VPN
The one built into Windows.
The Windows built-in doesn’t have the Always-On option as other clients have. Eg. the login before user even login.
Is this the always on where you click on VPN at the login screen or did I miss something?
You missed something.
Windows has had an always on solution for 15 years now. Direct Access was the former technology. Windows 10 replaced that with AOVPN, which is standard IPsec.
Does require Enterprise for device tunnels though
You missed something.
Microsoft refers to “Always On VPN” as RRAS but with Always on defined in the XML, new with Windows 10. It automatically connects on user login (or any network connection if configured, what they call Device Tunnel) and keeps the connection alive, but otherwise it’s the traditional RRAS VPN we’ve known and loved for almost 20 years.
Awesome, thanks I’ll dive into that