SSL VPN Timeout whilst uploading/downloading

[codflanglers_]

One of my users is having a problem (I personally don't agree), when he is uploading/downloading over the vpn he is getting an inactivity timeout. Now, we've been quite generous with the timeout, but he talking about uploading/downloading over 6 hours and complaining that it times out.

Does the box look at the data going over the VPN tunnel to determine user activity, if so why is it timing out? Or is there an absolute timeout for the vpn tunnel that he is reaching?

Forgive the questions, I'm just getting to grips with the box.

[Mrkool_]

There is an max session timeout you can check for that in the role session options. It could be that this user is getting multiple roles and is getting a smaller Max session lenght.

[wotsit_]

If the upload session is managed by a SAM then the data transfer should count towards the idle timeout, and as such, the session should not time out for being idle - however if the max session length is reaced then this will be enforced.

What is your idle session set to under the relevant role?

One other thing that may be worth looking at is the Idle Timeout Application Activity option under RoleName>General>Session Options I think.

[stine_]

If you're using Network Connect, there is a admin setting to determine whether or not non keyboard/mouse traffic is counted with regards to keeping the session from timing out.

That being said, I have (SA-2000 6.4r2) been able to switch between processes on my XP pc (possibly including opening new Secure Gateway Windows) that have caused the Network Connect client to STOP counting file transfer/rdp screen refresh traffic towards keeping my session from timing out. In these cases (rare, but not that rare) I have to click 'Extend Session' every 15 minutes (my idle timeout period) to keep from being disconnected due to idle timeout.

Of course, if the message your user is getting is the MAX timeout, then no, there's nothing that can be done, save increasing the Maximum session length for the users' role. I currently have mine set at 23:59 because there's nothing worse than being 14 hours into a job and getting hard disconnected...

One trick you can use is to open Network Connect, rdp into a box on the LAN and run your app from there (especially if it's a HUGE download from the internet). That way, if you get disconnected, the RDP session will stay active until you can reconnected (depending on your remote control settings). In fact, I have an XP VM in my LAN that I use for just this reason.