VPN redirection is a feature that validates the user's access to the VPN before letting them sign in without.
...
After the device performs lyncdiscover it will be redirected to a unique hostname that will trigger that the split tunnel VPN.
That host will send traffic to the DMZ Bastion server via an internal IP address. That way the LAC filter will be able to know that if the traffic originated from a VPN came from the VPN.
How to setup VPN redirection?
...
1.Navigate to the 'Registration' page in the Access Portal
2. Set 'Require registration via VPN' to YES.
3. Add the appropriative values to the following attributes:
Front End pool FQDN
VPN Host name for Bastion - this is the VPN hostname that will also appear in thre Bastion.xml configuration file.
Restart the Bastion service