Solved: WebVPN timers

tholmes · ‎05-22-2008

Hello,

I've set up WebVPN to allow access to Citrix servers, it works fine, but the problem is that when the user closes the session and IE window, the ASA keeps the WebVPN session open for 30mins.

Is there any way to cut dowm this timer, as its a security and resources problem.

I've looked using the ADSM but can't find a setting.

Any help appreciated

Regards Tony

andrew.prince · ‎05-22-2008

Tony,

This is a little bit dangerous, as you could have some upset users but:-

group-policy <> attributes

vpn-idle-timeout #

#=number of minutes

HTH.

View solution in original post

andrew.prince · ‎05-22-2008

Tony,

This is a little bit dangerous, as you could have some upset users but:-

group-policy <> attributes

vpn-idle-timeout #

#=number of minutes

HTH.

tholmes · ‎05-22-2008

Actually you put me on the right track, there are numerous commands in CLI not shown on the ASDM.

There is a WebVPN sub-command for 'defaul-idle-timeout' which has a default of 30mins!

Many thanks for your reply

andrew.prince · ‎05-22-2008

np - glad to help.

just one more thing - the ASDM is still in it's infancy - don't rely on it, it's no substitue for the cli! :o)