This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Timeout settings for SSL remote access using AD Authentication

Hello,

I am looking for confirmation if there is a setting for remote access sessions to terminate if idle and max connection times are reached?

We are currently using SSL connection with AD authentication. I am seeing users connected for days and nothing is forcing them to disconnect and create a new session.

This thread was automatically locked due to age.

0 BAlfson over 8 years ago

Hi, Brad, and welcome to the UTM Community!

I suspect that a Feature Suggestion already has been made for this. You might want to add a comment and some votes to it.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 Scott_Klassen over 8 years ago

Not officially, no. See openvpn.net/.../65-openvpn-20x-manpage.html. A combination of ping-exit and inactivity in the client side ovpn file should do it. Be aware that you can change the client side config to your hearts content, but do not make manual changes to the server (UTM) OpenVPN config if you are a paid user, as it will negate your support contract.

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel
0 BradMorrison over 8 years ago in reply to Scott_Klassen

Thanks Scott.
I was able to modify the client config file on a test machine and got the results I was looking for. I am trying to see how I can make this part of the default config settings whenever a user downloads the setup.
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 8 years ago in reply to BradMorrison

Brad, you want this thread: community.sophos.com/.../203097

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 BradMorrison over 8 years ago in reply to BAlfson

This was perfect.

I believe I have it setup for what we require now.

Thanks for everyones prompt support.
Cancel
Vote Up 0 Vote Down

Cancel
0 Scott_Klassen over 8 years ago

No problem. Enjoy.

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel
0 mv425 over 6 years ago in reply to BradMorrison

Hi Brad,

I'm trying to figure out the same - can you advise how you modified the config file please?

Thanks.
Cancel
Vote Up 0 Vote Down

Cancel