How to Automatically Log Out Idle Users from GlobalProtect Clients

How to Automatically Log Out Idle Users from GlobalProtect Clients

21200
Created On 09/26/18 13:49 PM - Last Updated 02/07/19 23:46 PM


Resolution

PAN-OS 6.1

Overview

The number of idle minutes after which users will be disconnected from GlobalProtect can be configured by specifying the "Disconnect On Idle" value.  A user is idle when there is no traffic going through his/her VPN tunnel. The default value for 'Disconnect On Idle' is 180 minutes.

Note: This setting is only applicable for clients using the on-demand method of connecting to GlobalProtect.

Steps

On the Palo Alto Networks firewall, follow these steps:

  1. Go to Network > GlobalProtect > Gateways > GlobalProtect Gateway > Client Configuration.
  2. On the Client Configuration tab go to the Tunnel Settings > Timeout Configuration section.
  3. Specify the number of minutes to Disconnect On Idle.

GP-Gateway-01.jpg

owner: hlim



Attachments
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClqVCAS&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Attachments
Choose Language