SSL VPN: Delayed Disconnection

Table of Contents:

• Overview
• Scenario and Configuration on SFOS
• Workaround
• Related Information

Overview:

SSLVPN User still shows in the live user list after disconnection from the client when connecting using UDP 

Scenario and Configuration on SFOS: 

• SSLVPN Global settings are configured with Protocol as UDP

• Create a user, and add it under the SSL VPN profile

• Download the SSLVPN configuration from the user portal and use it on remote access client

• Initiate the connection and the connection will be successful.

• Disconnect the tunnel from the remote access client

• The client will disconnect from the connect client application but it will still appear under the Current activities → Live user list

Workaround:

Use a TCP-based SSLVPN RA connection, Which will immediately disconnect the user from the live user list

Related Information:

• This is a known issue in Sophos Firewall: NC-120615
• Refer to the KIL: https://docs.sophos.com/support/kil/index.html