Log out SASE without any alert

Prisma_Admin — Tue, 31 Aug 2021 01:59:08 GMT

My company has just introduced prisma access (SASE) in this year.

According to increasing telecommuing and business trip, the concept of SASE is greate and fit to our requirement that everyone can use and external netwrok like an internal network always.

By the way, there is a very weird contraint on global protect agent which should ensure network availabliity at all time based on SASE concept.

The maximum log-in life time is 365 days, means that everyone who are working using a global protect suddenly loses their network service witohout any prior notice after 1year.

The meaning of VPN in SASE concetp, it is not a temporary internal network use, but a main business purpose network.

Why there is no slection for Permanet on life-time configuration?

How to explain to my employees on this matter?

"After 1 year since Global Protect log-in, your network will be suddenly cut off. So, don't do any impotant work at this time or please use annual leaving".

In add

I already know that maintaining cookie permanently is one of the security risk.

But also it has some problem the connection would be broken.

SASE concept means it provides all security environment which was set by companies policy.

But if SASE connection was broken we can't maintain our policy.

Because User's will not log in SASE because it control their Device.

Than it may causes security accident like security leak. (They can also access to malware websites)

It would be risk.

Does this make sense??????????

Re: Log out SASE without any alert

SuperMario — Tue, 31 Aug 2021 19:30:56 GMT

Using a cookie without an expiration is a security risk. To allow devices to connect seamlessly without depending on the cookie authentication lifetime is better to use certificates (machine/user). It is also a best practice.

Re: Log out SASE without any alert

Prisma_Admin — Wed, 01 Sep 2021 00:03:58 GMT

Thanks for your comment. Using a certificate is just one of option we can choose.

When we talk about security or security risk, it should be after availavility is secured in advance.

In case of prisma, there is no control function against unspecified network cut-off !!!!!!

topic Log out SASE without any alert in Prisma Access Discussions

Log out SASE without any alert

Re: Log out SASE without any alert

Re: Log out SASE without any alert