Solved: Max Connect time setting ASA 5520

oklier · ‎07-30-2011

Hello,

My searches are comming up blank for some reason, its just me. Just need to know where I can set a Max connect time so users dont camp on the ASA when they are not using it.

Thanks in advance!

JORGE RODRIGUEZ · ‎07-31-2011

In the same link provided before - look under vpn-session-timeou configuration , this command enforces a maximun RA connection per tunnel or per username

http://www.cisco.com/en/US/docs/security/asa/asa82/command/reference/uz.html#wp1631430

PLS rate helpful posts

Regards

Jorge Rodriguez

View solution in original post

JORGE RODRIGUEZ · ‎07-30-2011

Hi,

if you meant users connected to ASA for administration of the firewall either by ssh/telnet/ or https you can set the timeout session for each of these connections to the asa to expired at a certain time in minutes , if this is not what you meant please let us know.

#telnet timeout < value in min> max is 1440 min

#ssh timeout max is 60 min

# http server session-timeou max is 1440

See command references http://www.cisco.com/en/US/products/ps6120/prod_command_reference_list.html

Regards

Jorge Rodriguez

oklier · ‎07-30-2011

Sorry not what I meant. I was looking for Max Time out for VPN clients, i.e. after 24 hours they get disconnected regardless of activity and they are forced to reconnect.

Sorry for not clarifying earlier.

JORGE RODRIGUEZ · ‎07-30-2011

ok

You are looking at vpn-idle-timeout attribute settings under group-policy for yourRA vpn tunnel or per username , follow guidelines bellow.

http://www.cisco.com/en/US/docs/security/asa/asa82/command/reference/uz.html#wp1630720

Jorge Rodriguez

oklier · ‎07-30-2011

Thanks! I already have that set though. When they have Outlook open it will never be idle .

JORGE RODRIGUEZ · ‎07-30-2011

So then the connection is not idle, if you want to enforce a connection time then there is other settings you can use.

Jorge Rodriguez

oklier · ‎07-30-2011

You wouldnt happen to know them would you?

JORGE RODRIGUEZ · ‎07-31-2011

In the same link provided before - look under vpn-session-timeou configuration , this command enforces a maximun RA connection per tunnel or per username

http://www.cisco.com/en/US/docs/security/asa/asa82/command/reference/uz.html#wp1631430

PLS rate helpful posts

Regards

Jorge Rodriguez

oklier · ‎08-03-2011

Thanks!!