User Identity Policy allows active sessions

[Asok]

Hello,

We have fortigate 80C (FortiOS V5.0+) using User identity based policy and Created a Schedule timeout policy for accessing facebook and youtube in lunch time.The problem is after the scheduled timeout the active session will still be allowed facebook and youtube (not blocking) but new sessions is blocking.

 Any idea , how to fix this?

Thanks,

Asok

[Carl_Wallmark · Accepted solution]

Hi,

Can´t remember if this was introduced in 5.0 or 5.2 but you need "hard-timeout"

# config user setting

# set auth-timeout-type

idle-timeout Idle timeout. hard-timeout Hard timeout. new-session New session timeout.

[Asok]

Hi,

Thank you very much,this worked but the User entry will be removed after the configured auth- timeout value.

So the user will be prompted to authenticate every 5 mints (if the auth timeout is 5 min) for further requests. Right?

Thanks ,

Asok