Pix IDLE-TIMEOUT

[mrperty]

Hi,

Have pix firewall which my vpn clients connect against. These clients authenticate against RSA Authentication Manager. I have a problem whereby a third party who vpn's against pix stays connected for day or two even though idle-timeout setting has been applied to pix for 10 mins of inactivity. Is there anything else i can do around this or does anyone know if there is a Setting in RSA Authentication Manager to disconnect an idle session after "x" number of minutes.
tks.

 

[KiscoKid]

You should be able to change VPN timeouts using the following command "vpngroup group_name user-idle-timeout user_idle_seconds"

The following is an excerpt from the PIX command reference that explains more about it:

http://www.cisco.com/en/US/products...erence_chapter09186a00801727ae.html#wp1099471

 

[mrperty]

i have that entry in pix but client still stays up forever
vpngroup "vpnuser" user-idle-timeout 300. Do you if anything i can do in RSA