Client checks for DNS suffix, default gateway MAC, or file/registry presence. If matched → VPN not required (or auto-disconnect).
The "Always-on" feature is particularly significant for security posture. Once configured, the VPN client automatically initiates a connection as soon as the computer detects an internet connection. This ensures that remote employees are constantly protected by corporate security layers without needing to remember to manually activate the VPN. Furthermore, v4.x supports Single Sign-On (SSO), allowing users to authenticate once using their corporate credentials, which are then passed through to the network infrastructure, streamlining the login process.