Guest user access relogin every day

[MWoWGW]

Hello Community,

i've got a huge problem with guest user accouts session times on customers setup. The Fortigate (200F v6.4.8) presents the guest accounts and also a captive portal. The problem: All Endusers have to relogin every day (no matter what duration [1day, 1week, 1month or unlimited]).

My settings are:

config user group
    edit "GWLAN-1MON"
        set group-type guest
        set authtimeout 43200
        set auth-concurrent-override enable
        set auth-concurrent-value 3
        set expire-type first-successful-login
        set expire 2678400
        set multiple-guest-add enable
        config guest
            edit 1
                set user-id "user0001"
                set password ENC XXX
                set expiration 86400
            next

config user group
    edit "GWLAN-1DAY"
        set group-type guest
        set auth-concurrent-override enable
        set auth-concurrent-value 3
        set expire-type first-successful-login
        set expire 86400
        set multiple-guest-add enable
        config guest
            edit 5
                set user-id "user0007"
                set password ENC XXX
                set expiration 86400
            next

config user group
    edit "GWLAN-7DAYS"
        set group-type guest
        set authtimeout 10100
        set auth-concurrent-override enable
        set auth-concurrent-value 3
        set expire-type first-successful-login
        set expire 604800
        set multiple-guest-add enable
        config guest
            edit 1
                set user-id "user0103"
                set password ENC XXX
                set expiration 604800

config user setting
    set auth-type http https
    set auth-cert "Portal_Forti-1"
    set auth-timeout 1440
    set auth-portal-timeout 30
    set per-policy-disclaimer enable
end

I try to play with the timeouts but nothing changes. The client devices have to relogin into captive portal every day... I've no idea

Thanks in advanced

Markus

[Anthony_E]

Hello MWOWGW,

Thank you for using the Community Forum.

I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.

Regards,

[Anonymous]

Hello @MWoWGW ,

Thank you for your question. I have found this article : Technical Tip: Explanation of auth-timeout types for Firewall authentication users.

The following are suggestions that you could make to your configuration:
- Have you tried to change the  'set auth-timeout 1440 43200'? 
- Is the keepalive enabled in the global setting?

Please monitor this configuration and let me know if this helps.