###Update 20/9 - submitted as a new feature request - confirmed it does not exist in the current release. See how it goes
Has anyone found a way to have this un-ticked on deployment?
It is very frustrating having to manually connect each laptop 1x to download the Global settings which enforce this to silent.
CP support all seem to point to Global settings and not the Endpoint Manager.

Create a template workstation and when you export your package, point to the ini file on the template workstation client for the vpn config? I believe that setting is carried with it.
Edit: trac.config file
I can test later in the day.
This is a management server configurable option.
Its in Global Properties > Remote Access > Endpoint Connect > Connect Mode.
Choice are: .
- Manual
- Always Connected
- Configured on Endpoint Client
It used to be a $FWDIR/conf/trac_client_1.ttm option (neo_always_connected) on the gateway themselves, but it’s been in Global Properties since R77 I think.
Whenever a client connects to a gateway I believe it enforces any settings from trac_client_1.ttm
edit: corrected file name
are you sure it saves in an .ini file…seems very basic for an enterprise product
But you need to connect 1x to receive these settings. I am talking about the emebedded into the client from push
Check out sk100400. There are probably more but first result on mobile I could find.
But you need to connect to buil the VPN site in the first place…
As others said, you need to take a machine, set the VPN client up exactly how it should be for your end users, then extract the trac.config and push that out to your users through whatever means you have available.
Just looking at trac.config file - it is encoded so will need special software to edit that.
Just dont understand why its not an option under Advanced Deployment settings - seems logical place to enable/disable it
You can build the site in the Endpoint manager. Really this should be an option there for auto/manual. Its an easy option to create and others do it.
Extracting a file and pushing is an annoying post install step I would rather not have to force on our SCCM guy at this stage.
You manually configure a client the way you want. Then copy that Trac.config file to the machine you export the install package from. You don’t edit the Trac file manually. Use the endpoint client software.
It is encoded, but you can force it to decode.
Check out SK55120
You’re not really building the site from Endpoint Manager though, you’re just providing the first time connect details which the client then goes off to the gateway to download the topology etc.
Maybe take a look at sk122574
This allows you to create a fully custom MSI.
Yeah thats fine for one machine – we have 300 across 3 countries – not going to happen easily.
Thanks but its not what is needed. I guess I need to submit a feature request.
This is the closest i have seen - interesting that our CP tech SE didnt mention it.
Still not ideal though – but I will try it on the next release push