How to delay tunnel disconnection during shutdown

[KensukeShimomura]

Please give me some advice on what to do when FortiClient shuts down.

The system we use runs a script on logoff and records the logoff time on the Server.

However, when using FortiClient, the VPN session is disconnected before the logoff script runs, which prevents the logoff time from being communicated to the server.

Is it possible to configure settings to delay tunnel disconnection during shutdown?

[tpatel]

Hello Sir, 

Can you please enable auto keep alive in tunnel configuration so tunnel will not get disconnect when no data is being processed. 

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Using-the-IPSec-auto-negotiate-and-keepali....

[KensukeShimomura]

thank,

This does not seem to be the case since we are using the SSL-VPN method.

What I would like to know is how to delay the tunnel from being disconnected as soon as the PC's logoff process begins.

Is there any better way?

[tpatel]

Please set idle timeout to 0 so if user is not active then also connection is going to keep active.

You can also increase auth timeout value so we dont required to reauthenticate again after 8 hours.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-SSL-VPN-connection-logout-after-8-hours/ta...