When a VPN status is disconnected, AOV can block user access to network resources until the VPN connection is recovered. This is controlled by the AOV option Allow accessing network if VPN fail to connect:
Users can request to temporarily disable AOV by inputting a challenge code received in configured email. This is controlled by the AOV option Allow User to disconnect:
In case of client issues and to troubleshoot problems, there is a way for the SMA administrator to remotely disable the Always Running Client.
Regarding VPN Session control, when auto-reconnect is enabled for NetExtender on the client side, and an administrator kills the user session manually, the client does not try to reconnect. NetExtender tries to reconnect only when there is a network break which causes the VPN to disconnect.