How to Automatically Log Out Idle Users from GlobalProtect Clients
The number of idle minutes after which users will be disconnected from GlobalProtect can be configured by specifying the "Disconnect On Idle" value. A user is idle when there is no traffic going through his/her VPN tunnel. The default value for 'Disconnect On Idle' is 180 minutes.
Note: This setting is only applicable for clients using the on-demand method of connecting to GlobalProtect.
On the Palo Alto Networks firewall, follow these steps:
- Go to Network > GlobalProtect > Gateways > GlobalProtect Gateway > Client Configuration.
- On the Client Configuration tab go to the Tunnel Settings > Timeout Configuration section.
- Specify the number of minutes to Disconnect On Idle.