USG 40 - SSL VPN - disable multiple connection for user

Options
kaika313
kaika313 Posts: 31  Freshman Member
First Anniversary Friend Collector First Comment
edited April 2021 in Security

Hi,

we're using SSL VPN to connect to a USG40.

Some users forget to click on disconnect after using the VPN and so, until the reauthentication Time is reached, sometimes it happens that a user connects again and the SSL VPN tunnels get all occupied soon with same users connected multiple times. Is it possible to prevent this?

Thank you

Kari

All Replies

  • PeterUK
    PeterUK Posts: 2,714  Guru Member
    First Anniversary 10 Comments Friend Collector First Answer
    Options

    For each user you can set lease time to 2 minutes and in User/Group > settings you can check Enable user idle detection  

  • kaika313
    kaika313 Posts: 31  Freshman Member
    First Anniversary Friend Collector First Comment
    Options

    @PeterUK Ok for the idle detection but (sorry for the stupid question) won't the reduced lease time disconnect the user or disturb active connections?

    Thank you

  • PeterUK
    PeterUK Posts: 2,714  Guru Member
    First Anniversary 10 Comments Friend Collector First Answer
    edited March 2020
    Options

    The reduced lease time will renew if the user stays connected.

  • USG_User
    USG_User Posts: 369  Master Member
    First Anniversary 10 Comments Friend Collector First Answer
    edited March 2020
    Options

    How the USG conduct the idle detection, by scanning packets which are going through the tunnel? But a few packets will be transmitted through the SSL VPN tunnel also always without any user action.

    We are using a lot of SSL VPN tunnels, and when established, using RDP sessions to our office computers. Will this be detected by the USG as "not idle"?

  • Ian31
    Ian31 Posts: 167  Master Member
    First Anniversary 10 Comments Friend Collector First Answer
    Options

    @kaika313

    Here what I configure on my ZyWALL 110 to limit user account can only with 1 login.

  • PeterUK
    PeterUK Posts: 2,714  Guru Member
    First Anniversary 10 Comments Friend Collector First Answer
    Options

    Oddly that "Reach maximum number per account" setting is not in USG40

Security Highlight