Skip to main content
lucasH
New Member
May 10, 2021
Question

Issue with schedule timeout

  • May 10, 2021
  • 0 replies
  • 1528 views

Hello,

I set up a new clientless VPN to replace the old cisco one.

Due to our company policy past 8 p.m all connections must be closed by force (it's brutal but i have no other choice).

 

So i created a schedule that goes from 7 a.m to 8 p.m thus following our internal rules about telework.

Everything is working so far past that schedule new sessions cannot be created but i stumbled over a problem.

Whenever an RDP instance is created before the schedule let's say 7:55 p.m the user is able to use his RDP for all the night (unless disconnected throught idle).

 

I checked for further enforcement and i found out that the set schedule-timeout is disabled by default so i enabled it, so far no changes at all i'm still able to browse throught the RDP past the schedule.

 

I found a forti doc where it tells to add the following config :

- set firewall-session-dirty check-new in the policy

- set firewall-session-dirty check-policy-option in the system settings

 

Yet so far even with those 2 new lines nothing change again

 

I'm using a FortiGate-30E (it's for a proof of concecpt until it's done we'll switch to a better one)

The Firmware is the v6.2.8 build

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.