Keepalive Page Timeout different than auth-timeout

[Francesco_Bartolini]

Hi to everyone,

I'm new of this forum, and i try to explain my "problem".

I have a Fortigate FG-60E, v6.0.0 b0076 (GA), and on one of the interfaces I enabled the captive portal. Users authorized to access the internet are directly entered by me in the firewall and I have enabled the keepalive page, to prevent the session from remaining open when the browser is closed.

I configured the auth-timeout parameter as two minutes (and for testing also as longer times) but I noticed that the countdown on the web page of the keepalive is always 1/3 with respect to the auth-timeout parameter (for example, configuring 5 minutes the countdown starts from 100 seconds, configuring a minute starts from 20 seconds, etc).

But the real problem is that if I close the keepalive page, the session does not stay open until the countdown expires, but until the auth-timeout parameter expires, deceiving the user. Let me explain better: self-timeout 1 minute, countdown on the keepalive page 20 seconds, close the keepalive page at 10 seconds, the session remains active for 50 seconds and not for 20 seconds.

Has anyone noticed the same thing? It does not happen only on the firewall of my company, but also on other firewalls that we have installed.

Thanks for your support