Skip to main content
plupien79
Visitor III
December 5, 2024
Solved

Time limit for Forticlient Users on IP-sec VPN

  • December 5, 2024
  • 1 reply
  • 3567 views

We have a Forticlient EMS and are using IP-Sec VPN with entra SAML to login to the VPN.

I need to have a simple time limit that would disconnect users after 12 hours of being connected (active or not)

How can this be accomplished?

Post Connection script? Automation on Fortigate? Tagging Action in EMS?

Best answer by sjoshi

Please refer:-

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Hard-timeout-for-Dialup-IPSEC-VPN-Tunnel/ta-p/338835

 

This is one way of re auth the user

1 reply

sjoshi
Staff
Staff
December 5, 2024

can you show the config where you have setup the time limit

If you have found a solution, please like and mark it as solved to make it easily accessible for everyone.
plupien79
plupien79Author
Visitor III
December 5, 2024

I don't have it configured. But I need to, but there doesn't seem to be any guidance on this.

 

sjoshi
Staff
Staff
December 5, 2024

You can check with below settings:-

config vpn ssl settings
    set auth-timeout 28800
end
If you have found a solution, please like and mark it as solved to make it easily accessible for everyone.