Timeout for WebSocket KeepAlive

GiuseppeR · December 15

Hello everyone,

I would like to know if it is possible to change timeout for WebSocket KeepAlive because sometimes it is too short and you have to re-login in the device:

to complete the configuration you are doing with FlexH series devices.

Zyxel_Kay · December 16

Hi @GiuseppeR

The default re-authentication timeout for an admin user is set to 1440 minutes, but you can adjust this setting manually in User & Authentication > User/Group > User.

This setting determines the authentication timeout for the device's web configurator. However, the WebSocket KeepAlive timeout can also be affected by other factors, such as:

Network instability – Frequent interruptions may cause WebSocket connections to drop.
Browser behaviour – Some browsers may terminate idle or inactive sessions.
Intermediate device behaviour – Any device between the client browser and the firewall (e.g., switches or routers) might terminate idle sessions.

GiuseppeR · December 16

Hello @Zyxel_Kay

I think that limitation came from Nebula, for safety reasons I trigger the access to the firewall from Nebula webpage. It is just set to that value, but it seems that Nebula ignores it

Zyxel_Kay · December 17

Hi @GiuseppeR

When accessing the firewall's web configurator via the Nebula Livetools Remote Configurator feature, each session is limited to 30 minutes. Once the session expires, you will need to regenerate the link to establish a new session.

For longer remote access sessions, you can consider the following alternatives:

Allow HTTPS WAN access for direct access to the web configurator.
Establish a VPN tunnel to securely connect to your network.
Access the device directly via the LAN subnet if it’s feasible in your setup.

GiuseppeR · December 17

Hello @Zyxel_Kay

thanks for those infos, but it is not always available a public static IP to do that.

Via Nebula you can configure also remote 5G router in IP passthrough, it is very useful and efficient.

Having the possibility to change that value inside Nebula would be great for more specific firewalls configs. 😁

Zyxel_Kay · December 18

Hi @GiuseppeR

Thank you for your feedback!

If you believe having the ability to adjust the session timeout value in Nebula would enhance its usability, we encourage you to share your suggestion in the https://community.zyxel.com/en/categories/nebula-ideas section. Our team regularly reviews feature requests there and evaluates them for potential implementation.

Timeout for WebSocket KeepAlive

All Replies

Categories

Security Help Center