Hi
Can somebody explain the difference between idle-timeout and auth-timeout in vpn ssl settings?
I've seen the help page but I don't seem to understand how is the end result any different between the two.
Thanks
Idle Timeout: The idle-timeout is period of time in seconds that the SSL VPN will wait before timing out.
Auth-Timeout : The auth-timeout is period of time in seconds that the SSL VPN will wait before re-authentication is enforced.
Now lets say, Idle Timeout is 10 Minutes and Auth Timeout is 5 minutes.
The SSL connections logs out at 5 minutes irrespective of the traffic through SSL. Even if SSL is not idle, due to the auth-timeout value of 5 minutes, user will have to authenticate again.
For the reverse values, Idle Timeout is 5 Minutes and Auth Timeout is 10 minutes.
Lets says the user is connected but there is no traffic through tunnel for 5 minutes, tunnel will go down. If the user is connected and tunnel is not idle, tunnel will go down only after 10 minutes.
Ref: https://kb.fortinet.com/kb/documentLink.do?externalID=FD39435
Ref: https://kb.fortinet.com/kb/documentLink.do?externalID=FD37221
Suraj
- Have you found a solution? Then give your helper a "Kudos" and mark the solution.
Thanks
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.