How to delay tunnel disconnection during shutdown

Forum|Forum|1 year ago
September 27, 2024
3 replies
1268 views

Please give me some advice on what to do when FortiClient shuts down.

The system we use runs a script on logoff and records the logoff time on the Server.

However, when using FortiClient, the VPN session is disconnected before the logoff script runs, which prevents the logoff time from being communicated to the server.

Is it possible to configure settings to delay tunnel disconnection during shutdown?

tpatel

Staff

Hello Sir,

Can you please enable auto keep alive in tunnel configuration so tunnel will not get disconnect when no data is being processed.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Using-the-IPSec-auto-negotiate-and-keepalive/ta-p/189536#:~:text=FortiGate.&text=Autokey%20Keep%20Alive%3A%20Enable%20the,the%20new%20SA%20without%20interruption.

KensukeShimomuraAuthor

New Member

thank,

This does not seem to be the case since we are using the SSL-VPN method.

What I would like to know is how to delay the tunnel from being disconnected as soon as the PC's logoff process begins.

Is there any better way?

tpatel

Staff

Please set idle timeout to 0 so if user is not active then also connection is going to keep active.

You can also increase auth timeout value so we dont required to reauthenticate again after 8 hours.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-SSL-VPN-connection-logout-after-8-hours/ta-p/191322

Sign up

Login with SSO

Login to the community

Login with SSO