topic Re: Session Expire Time one month in General Topics

Session Expire Time one month

qmso475 — Thu, 14 Sep 2023 01:55:49 GMT

The session expiration time is more than a month apart.

I'm using the 10.1.8 version and my search says it's a firmware bug.

However, the same symptoms appear in version 10.2.1.

Is there a solution in relation to it?

Re: Session Expire Time one month

Claw4609 — Thu, 14 Sep 2023 12:34:52 GMT

What is the session timeout of the device set to? It looks like the default value is 30 days if nothing is specified.

Device > Setup > Management > Authentication Setting > Max Session Time

Device > Setup > Management (paloaltonetworks.com)

"Enter the number of minutes (range is 60 to 1,499) that an active, non-idle administrator can remain logged in. Once this max session time is reached, the session is terminated and requires re-authentication to begin another session. The default value is set to 0 (30 days), which cannot be manually entered. If no value is entered, the Max Session Time defaults to 0."

Re: Session Expire Time one month

BPry — Thu, 14 Sep 2023 12:50:42 GMT

@qmso475,

So the last login time and the current login aren't displaying the same thing to be clear. You should have 30 days by default for the session expire time at the time of the current login session. So if you login at 0600 today on 2023-09-14, you would expect to see the session expire time of 2023-10-14 at exactly the same time as your current login session.

The 'Last Login Time' is exactly that, it's the last time you authenticated. That is to say, it isn't the current login session, but the session that you had previously authenticated. Its displayed so that you can see not the current login time, but rather the last time that the device shows that you authenticated. This is so you can potentially identify any abnormal login activity if your last login time doesn't line up with the last time you actually logged into the device.

Hopefully that helps, but the two values aren't directly related at all.