Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
ihenock101
Collaborator
Jump to solution

Checkpoint Remote Access SSL VPN and Capsule timeout

Hi All,

I'm writing in regards to configuring the remote SSL VPN on my Checkpoint gateway server. I have configured the server, and by default, the idle timeout when a client connects is set to 2 hours.

I would like to make two changes to this configuration:

1. Set the idle timeout value when a user connects

2. Set the time limit for when a user can connect

Please let me know if these changes are possible and what steps I need to take in order to implement them. I’ve attached the SSL extender screenshot. You can see that it starts with two hours and keeps counting down.

Regards,

0 Kudos
1 Solution

Accepted Solutions
G_W_Albrecht
Legend
Legend

You are using MAB Network Mode and need to configure it in Dashboard:

snx.jpg

CCSE CCTE CCSM SMB Specialist

View solution in original post

(1)
5 Replies
G_W_Albrecht
Legend
Legend

We have to keep legacy SNX and MAB apart:

SNX sk77380 says: No, there is no idle session timeout for SNX.
That functionality does not currently exist in SNX. If you connect SNX, the only timeout is the re-authentication available under Global Properties-Remote Access-SSL Network Extender-More Advanced Settings

MAB sk176924: How to increase SNX session timeout

CCSE CCTE CCSM SMB Specialist
0 Kudos
ihenock101
Collaborator

@G_W_Albrecht the re-authentication timeout value for the SNX in the global properties is 480 minutes however as you can see from the attachment the SNX shows 2 hour expiration time 

0 Kudos
G_W_Albrecht
Legend
Legend

You are using MAB Network Mode and need to configure it in Dashboard:

snx.jpg

CCSE CCTE CCSM SMB Specialist
(1)
ihenock101
Collaborator

@G_W_Albrecht Thanks a lot Sir. does it require a restart since it is in production evironment?

0 Kudos
G_W_Albrecht
Legend
Legend

Publish and Policy Install should be enough for all new connections.

CCSE CCTE CCSM SMB Specialist
0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    Wed 01 May 2024 @ 02:00 PM (EDT)

    South US: HTTPS Inspection Best Practices

    Tue 23 Apr 2024 @ 11:00 AM (EDT)

    East US: What's New in R82

    Thu 25 Apr 2024 @ 11:00 AM (SGT)

    APAC: CPX 2024 Recap

    Tue 30 Apr 2024 @ 03:00 PM (CDT)

    EMEA: CPX 2024 Recap

    Wed 01 May 2024 @ 02:00 PM (EDT)

    South US: HTTPS Inspection Best Practices

    Tue 23 Apr 2024 @ 11:00 AM (EDT)

    East US: What's New in R82

    Thu 25 Apr 2024 @ 11:00 AM (SGT)

    APAC: CPX 2024 Recap

    Tue 30 Apr 2024 @ 03:00 PM (CDT)

    EMEA: CPX 2024 Recap

    Thu 02 May 2024 @ 11:00 AM (SGT)

    APAC: What's new in R82
    CheckMates Events