topic Re: Remote access disconnect at midnight in SASE and Remote Access

Remote access disconnect at midnight

skandshus — Sun, 12 Dec 2021 02:03:13 GMT

Hi everyone.. so something I’ve been struggling to figure out.. everyday at excactly midnight my remote access will disconnect and prevent me from further connecting until 8 am in the morning..

the weird part of this is that I’ve never done any tampering or configuration to limit the hours where it’s possible to connect… does anybody know where in smart console I can fix this??

Re: Remote access disconnect at midnight

PhoneBoy — Mon, 13 Dec 2021 20:42:14 GMT

As far as I know, this isn’t a feature of the gateway.

What is the precise behavior when it disconnects or when you try to connect during that window?
If you try it from a different Internet connection, same or different behavior?
What version of the VPN client?
What version/JHF of the gateway?

Re: Remote access disconnect at midnight

K_montalvo — Mon, 13 Dec 2021 21:04:47 GMT

@skandshusWhen you get disconnected does de hostname is reachable? Are you authenticating using local user or LDAP ?

Re: Remote access disconnect at midnight

skandshus — Mon, 13 Dec 2021 22:09:08 GMT

Don’t remember version in top of my head regarding jhf (typing from phone) but it’s been happening since r81. To r81.10 and through all hot fixes..

remote access client has had the issue in version 84-85-86… it just fails to authenticate.. so does capsule on my iPhone.. failed to authenticate is the message..

Re: Remote access disconnect at midnight

skandshus — Mon, 13 Dec 2021 22:10:21 GMT

Host name is reachable.. connecting by ip doesn’t help either.. I am using local users..:)

Re: Remote access disconnect at midnight

K_montalvo — Tue, 14 Dec 2021 16:27:14 GMT

This happens with all the local users that usually connects using the same remote access community? Are you sure threes no object or anything defined with time on a policy? Do you see any logs reaching the Gateway and look for any message or share the log?

Re: Remote access disconnect at midnight

skandshus — Fri, 17 Dec 2021 23:56:26 GMT

Yep.

there is only 1 policy regarding remote access, and that's which users can access the network 🙂

just tried for the fun of it all to connect from the endpoint client on my pc.

and now i can just wait until 8 in the morning (7 hours from now) then i will be able to connect again..

Re: Remote access disconnect at midnight

skandshus — Sat, 18 Dec 2021 00:04:42 GMT

Logs are showing these:

i can see there is a reason: time limitation. but i never messed with those? i dont even know WHERE or HOW to set time limitations 🙂

Re: Remote access disconnect at midnight

PhoneBoy — Sat, 18 Dec 2021 00:52:33 GMT

I believe there is a time limitation you can set on individual locally defined users.
Perhaps that is what is causing this?

Re: Remote access disconnect at midnight

skandshus — Sun, 19 Dec 2021 23:03:22 GMT

You were right.. apparently users has 08:00-23:59 set.. wonder if that’s a standard time allocated upon creation

Re: Remote access disconnect at midnight

the_rock — Mon, 20 Dec 2021 00:29:33 GMT

You can always leave default settings as is and then set timeout in global properties to whatever you prefer.

Re: Remote access disconnect at midnight

skandshus — Mon, 20 Dec 2021 04:05:10 GMT

Don’t think that will change something.. or do you have a special setting in mind..

Re: Remote access disconnect at midnight

the_rock — Mon, 20 Dec 2021 04:30:02 GMT

Its under global properties, remote access vpn I believe. I will check Monday.

Re: Remote access disconnect at midnight

the_rock — Mon, 20 Dec 2021 14:10:29 GMT

These are what Im referring to. Global property setting would override the local user setting, Im pretty sure of that, but maybe others can confirm 100%.

Re: Remote access disconnect at midnight

K_montalvo — Mon, 20 Dec 2021 17:19:26 GMT

Yes you are correct brother!