FortiClient SSL session continues to run after user logs out

[UEC]

We have FortiClient configured via EMS to run before login, so that users are shown the FortiClient login screen rather than the Windows one.

This is all working correctly.

Once User 1 logs out, their SSL VPN session is not terminated. If User 2 then logs in via the same login page, the FortiClient program still shows the tunnel as being connected via the User 1 username.

I think it's the same issue as this person, but they never received a reply: https://community.fortinet.com/t5/Fortinet-Forum/Continued-FortiClient-VPN-Session-after-User-Logout...

What's the best way to accomplish this?

[Anonymous]

Hello @UEC ,

                Thank you for using the Community Forum. Could you please provide the following information

- When the user logs out from the SSL-VPN, do you  see the logged off event in the SSL-VPN event log for the respective user?

- When you  check on the firewall, do you see an existing session present under the SSL-VPN monitor?

- Could you  please run the following command on the FortiGate console, before and after the VPN connection of a particular user

get vpn ssl monitor

Thanks,

[EganOrel]

May be this reply is helpful for you https://community.fortinet.com/t5/Fortinet-Forum/FortiClient-SSL-session-florida lottery results-continues-to-run-after-user-logs-out/m-p/207968