We've been doing this for years with a session start script. After Network Connect makes a connection, the script is downloaded to the client and then ran. The script then closes all IE browser instances and does a few other things. This has worked well in our environment of roughly 300 users. The session start script configuration is located in the Roles Network Connect options.