Skip to main content
Cristian_Penco
New Member
November 25, 2014
Question

Scheduled SSL VPN access

  • November 25, 2014
  • 2 replies
  • 6565 views

Hi,

 

I need to set up scheduled SSL VPN access for some users. Created separate groups, separated schedule, applied to the firewall policy...

But, if for example i restart the firewall, and the scheduled time is expired for that user:

- the user can connect to vpn, but traffic is not passing - that is OK

- I set the new sceduled end time to end for expample 5 minutes from now and the connected user get the traffic going - that is OK.

- when the time expires, the user still have full access - that is NOT OK

- disconnect and reconnect the user and he stillhas access - that is NOT OK

- even after half hour of the expired time the user can still connect and has access...

 

What I noticed is that the client has to be disconnected for some time after the schedule end to enforce the right time.

 

Is that a supposed behavior? What am I doing wrong?

 

This done on a Fortigate 100D with V4.0 MR3 Patch 18.

 

Thanks for the uesfull responses.

 

Cristian

2 replies

Mark_Oakton
New Member
November 25, 2014

which policy have you put the schedule on?, vpn or inbound?

Cristian_Penco
New Member
November 25, 2014

Tried on all, the problem is as I nailed a bit, that the client has to be disconnected after the end time of the schedule to enforce it, like a minute or so, if less he can reconnect and gain all the access.

 

##Edit##

 

Seems that this is a Bug present in all of the current version. Still working with support for the issue.

Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT