USG 40 - SSL VPN - disable multiple connection for user

kaika313

Hi,

we're using SSL VPN to connect to a USG40.

Some users forget to click on disconnect after using the VPN and so, until the reauthentication Time is reached, sometimes it happens that a user connects again and the SSL VPN tunnels get all occupied soon with same users connected multiple times. Is it possible to prevent this?

Thank you

Kari

PeterUK

For each user you can set lease time to 2 minutes and in User/Group > settings you can check Enable user idle detection  

kaika313

@PeterUK Ok for the idle detection but (sorry for the stupid question) won't the reduced lease time disconnect the user or disturb active connections?

Thank you

PeterUK

The reduced lease time will renew if the user stays connected.

USG_User

How the USG conduct the idle detection, by scanning packets which are going through the tunnel? But a few packets will be transmitted through the SSL VPN tunnel also always without any user action.

We are using a lot of SSL VPN tunnels, and when established, using RDP sessions to our office computers. Will this be detected by the USG as "not idle"?

Ian31

@kaika313

Here what I configure on my ZyWALL 110 to limit user account can only with 1 login.

PeterUK

Oddly that "Reach maximum number per account" setting is not in USG40