VPN connection time limit for each user on Fortigate

[Duy2003]

Spoiler

Is there a way to configure a VPN connection time limit for each user or a group of users?

For example: user 1 is connected to VPN for 1 hour
user 2 is connected to VPN for 2 hours

After 1 hour, user 1 disconnects and re-authenticates. After 2 hours, user 2 disconnects and re-authenticates.

[ozkanaltas]

Hello @Duy2003 ,

I didn't try before but I found documents about that. You can review these documents for auth timeout for the user or group.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Authentication-timeout-value-for-firewall-...

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Explanation-of-auth-timeout-types-for-Fire...

[Duy2003]

Thank you for responding. I will test my lab

[Duy2003]

Hi @ozkanaltas 

Sorry, I tried it and nothing happened.
The auth timeout configuration has no effect on the VPN connection time limit from Client to Fortigate

[hbac]

Hi @Duy2003,

'auth-timeout' will impact user authentication, for example in policies or captive portal. But it does not have any impact for SSL-VPN authentication. You can follow this article instead: https://community.fortinet.com/t5/FortiGate/Technical-Tip-SSL-VPN-connection-logout-after-8-hours/ta...

Regards, 

[Duy2003]

Hi @hbac 
Thank you for responding, so is there any other way?