How to Change the Admin Session Timeout Value

46007

Created On 09/27/18 10:35 AM - Last Modified 06/01/23 22:56 PM

Admin Access

Next-Generation Firewall

Resolution

The idle-timeout value indicates how long an admin session can remain inactive before the Palo Alto Networks firewall deletes the entry.

The show admins command displays information, including idle time, of the admins who are currently logged in.

For example:

> show admins

Admin From Client Session-start Idle-for

------------------------------------------------------------------------------------------------------

admin 10.22.2.22 CLI 08/05 13:32:46 00:00:00s

admin 10.22.2.22 Web 08/05 13:34:26 00:00:00s

admin 10.22.2.22 CLI 08/05 13:31:34 00:02:23s

To change the idle timeout value of the admin session, run the following command:

# set deviceconfig setting management idle-timeout <value>

Note: The <value> is in minutes with a range between 0 and 1440. The default value is 60 minutes, and a value of 0 indicates never timeout.

owner: nayubi