Mobile Access Local User Expire Date / Session Timeout

caneraltinel — Mon, 15 Feb 2021 08:40:34 GMT

Hi Expert,

I am using Mobile Access R77.30 for our workers and 3rd Party users for VPN. I have 240 minutes session time out for Mobile Access.

I must have time limit for 3rd party users, which I can set on User Properties -> Time and User Properties -> Experation Date.

But assume that, one user have 15.02.2021 - 18:00 expiration date and time. The problem is, if this user connects the VPN on 17:59, he/she can still stay connected and authorized to start RDP session for another 240 minutes. So the expire time for 18:00 won't work, user can stay connected till 21.59.

Is there a way to disconnect the user at the expire time, so user cannot connect again? Or drop the RDP session some how with an API maybe?

Regards

Re: Mobile Access Local User Expire Date / Session Timeout

PhoneBoy — Mon, 15 Feb 2021 18:07:15 GMT

It’s operating as expected as we only check the time at connection establishment.
There isn’t really an API you can use (especially on R77.30 where no REST APIs exist), but you may be able to terminate the connection using fw sam on the CLI or similar (depending on how it shows up in the connections table).

And yes, R77.30 has been End of Support for more than a year and you should upgrade to a supported release.

topic Re: Mobile Access Local User Expire Date / Session Timeout in SASE and Remote Access

Mobile Access Local User Expire Date / Session Timeout

Re: Mobile Access Local User Expire Date / Session Timeout