Force session to end

[CHR57]

We are looking into giving support staff the possibility to open for Internet access temporarily.

I think I can do that with a user in the policy/source and they trigger the policy in the browser, right?

But is it possible to force the session to end (turn off Internet access) after x min? If I conf session-ttl it want close Internet access if there is traffic on it, right?

Edit

Something like this?

https://community.fortinet.com/t5/Support-Forum/Enable-Security-Policy-Temporarily-for-Specific-Time...

[AEK]

What you need is to set schedule in your policy.

Here is the tech tip you need.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-configure-schedule-policy-with-deny...

[CHR57]

I was looking into that, but can you set a schedule as a timer, like close after 60 minutes?

[AEK]

For sure. Just do it this way.

[CHR57]

Will it work any day after 01/24/2024?

Don't think so.

[AEK]

You can set the "Type" of schedule "Recurring" or "One Time".

E.g.:

• If you want is every day or every Monday at 10:00 you set it recurring
• If you want it just once then set it "One Time"

[Bjay_Prakash_Ghising]

Hi @CHR57 

You can use the user setting for that criteria.

Change Auth timeout to Hard session. 

The user will disconnect after a specified time. 

# config user setting

    set authtimeout 60   

    set auth-timeout-type hard-timeout

User entry will be removed after the configured auth- timeout value. You need to authenticate to access the resource again.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Explanation-of-auth-timeout-types-for-Fire...

Note this is a global setting. So it will apply to all the users.

Hope that helps.

Kind Regards, 

Bijay Prakash Ghising

[Bjay_Prakash_Ghising]

You can also easily create multiple schedules and attach them to a group and later apply the "schedules group" to the firewall policy. If that fits your criteria. 

Please refer below article to do so.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-configure-two-or-more-firewall-sche...

Nowadays you can easily configure it from GUI.

Please let us know. If you have any queries left.

Kind Regards, 

Bijay Prakash Ghising