FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
anoushiravan
Staff
Staff
Article Id 420597
Description This article describes how to set proxy-re-authentication-time on FortiGate to specify the time limit that users must re-authenticate again on FortiGate.
Scope FotrtiGate.
Solution

By default, proxy-keep-alive-mode is set to 'session' in global settings, and proxy-re-authentication-time is a hidden command line that is available only when proxy-keep-alive-mode is set to 're-authentication' as follows in global settings:

 

config system global
    set proxy-keep-alive-mode re-authentication 
    set proxy-re-authentication-time 30
end

 

The feature 'proxy-keep-alive-mode' controls whether users must re-authenticate after a session is closed, traffic has been idle, or from the point at which the user was authenticated.

 

The feature proxy-re-authentication-time can be set from 1 to 86400 seconds, by default this option is set to 30 seconds.

 

Related article:

Technical Tip: Proxy users lifetime control