Skip to main content
Asok
Asok
New Member
March 30, 2016
Solved

User Identity Policy allows active sessions

  • March 30, 2016
  • 1 reply
  • 3843 views

Hello,

We have fortigate 80C (FortiOS V5.0+) using User identity based policy and Created a Schedule timeout policy for accessing facebook and youtube in lunch time.The problem is after the scheduled timeout the active session will still be allowed facebook and youtube (not blocking) but new sessions is blocking.

 Any idea , how to fix this?

 

Thanks,

Asok

    Best answer by Carl_Wallmark

    Hi,

     

    Can´t remember if this was introduced in 5.0 or 5.2 but you need "hard-timeout"

     

    # config user setting

     

    # set auth-timeout-type

    idle-timeout Idle timeout. hard-timeout Hard timeout. new-session New session timeout.

    1 reply

    Carl_Wallmark
    Carl_WallmarkAnswer
    New Member
    March 30, 2016

    Hi,

     

    Can´t remember if this was introduced in 5.0 or 5.2 but you need "hard-timeout"

     

    # config user setting

     

    # set auth-timeout-type

    idle-timeout Idle timeout. hard-timeout Hard timeout. new-session New session timeout.

    Asok
    AsokAuthor
    New Member
    March 31, 2016

    Hi,

    Thank you very much,this worked but the User entry will be removed after the configured auth- timeout value.

    So the user will be prompted to authenticate every 5 mints (if the auth timeout is 5 min) for further requests. Right?

     

    Thanks ,

    Asok

     

    Terms & ConditionsAccessibility statement