Time out for the agent less session??

[aeroplane_]

Hi

I am using aget less mode of IC with Screen OS firewall. I am using anonymous authentication server for guest users. Can any body tell me is there any idle time out/session time out for the user session???

Thanks

[CraigB_]

You can set a timeout you wish based on the role assign to the user.

Thanks

Craig

[andre_]

Hi all,

I just want to clarify with craig said that we can set timeout on the user role:

on the user role we find 3 choices:

1. Max. Session Length

2. Heartbeat Interval

3. Heartbeat Timeout

we just can set maximal session length for user role ( it means active or idle is not matter, when user session reach max session length it will be timeout), but when user in idle mode means there is no activity from the user is it capable to set idle timeout when user is idle? or maybe this feature is not available in UAC?

The other question is : when we use OAC using SSO (UAC capture windows credential login) is it capable to set idle timeout when user is idle?

Please give me answer on this matter, i have same issue.

Thanks

Regards,

Andre

[zopilote_]

Hi

Regardless of agent mode of agentless mode,

Regardless of whether a user is in idle or not,

A host checker periodically communicates with IC at the Heartbeat Interval.

When Max Session Length is expired,

In agentless mode, A user have to login again.

In agent mode, OAC will do re-authentication in the background.

When Heartbeat Timeout is expired, The situation is the same as the Max Session Length.

[CraigB_]

Actually, let me clarify:

1. Max session length is how long a user is allowed to be signed in to the IC / network. Once this timer is reached, the user must reauthenticate.

2. Heartbeat Interval is how often the client has to send a message to the IC informing it that it is still on the network.

3. Heartbeat Timeout is used to help detect if a client has dropped off of the network without gracefully signing out. Unexpected reboot or network issue. If this timer is reached, the user will be kicked off of the IC and the session removed from the active user list. If a Juniper Firewall is in use, their auth table entries would also be removed.

Hope that helps.

Craig

[andre_]

Hi All,

Thank you for your Info....

So the conclusion is in IC only have option session length/Session timeout that we can set in user role, but there is no idle timeout option in IC, right?

Thanks

[Rabbit_]

Hi Andre,

You are correct, there is no idle-timeout that can be configured on the IC.

Regards,

Rich

[andre_]

Hi,

Thanks for your information.

Regards,

Andre