Skip to main content
ahmadswelem
New Member
March 22, 2018
Solved

Kicking out clients after a while

  • March 22, 2018
  • 7 replies
  • 12679 views

Hello,

 

i have a FortiGate 60E (v5.6.3 build1547 (GA)) and i want to kick clients out of my network after 30 mins, and i don't want them to reconnect until 24 hour is passed.

 

any advice?

Thanks in advance. 

Best answer by Fishbone_FTNT

Hi ahmadswelem, well :) I was thinking of some custom RADIUS server in python. There is excellent python-pyrad library, which you can take a look at. I have already written some smaller projects with it, so I can only recommend it. With it, you can simply create custom RADIUS server, you need just take care of passwords, and the logic of denying to accept user. It can be even quite interesting project, if you won't keep it simple :-) If you maintain passwords db on some other RADIUS server, you can eventually write some RADIUS proxy, using pyrad too. Doing the same with LDAP would be more difficult, in that case I would recommend to write it in RADIUS and handle backend authentication towards LDAP server. Quite simple, but not too simple.

Good luck,

Fishbone)(

7 replies

Fishbone_FTNT
Staff
Staff
March 23, 2018

Hello,

this is not standard function of Fortigate. The first part is easy, you can specify in user settings 30 minutes timeout, and 'set auth-timeout-type hard-timeout'.

 

However to make them unable to login again for next 24 hours is not possible with FortiGate only.

I can imagine you can do some creative scripting to make work something like this, but I am not quite sure if you are looking for such a kind of solution.

 

F)(

emnoc
New Member
March 23, 2018

If it's was  a IPS  driven-event you could maybe write a signature witha trigger and  then set a quarantine value , but the OP needs to explain what he/she is trying to do?

 

is this a fw user ( admin ) or a network user ?

 

Ken

 

ahmadswelem
New Member
March 25, 2018

Hi Emnoc,

 

this is a network user.

 

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!