At the moment, all company resources are "protected" behind a Cisco VPN, and our OSX clients are configured to (on-demand) connect to the VPN. As the VPN sets the default route for the OSX client to go through the VPN, it is extremely useful in protecting our employees data when they are on unprotected networks (i.e. coffee shops).
Is there a way to, on OSX, require that the VPN be setup before applications are allowed to use the network? It seems like a rather hard problem, as you sometimes need to use the network to connect to access a public network through a capture web portal before you can establish the VPN.