Firewall Authentication Timeout

Hi,

I having a problem that firewall authentication do not function properly that the user won't disconnect for the firewall. The timeout counter keep on reset. I have change the idle-timeout to hard-time. Yet still some user won't disconnect from the firewall. Any solution?