topic How to disable Multiple Concurrent SSL VPN Sessions with One Username? in General Topics

How to disable Multiple Concurrent SSL VPN Sessions with One Username?

Amir.Borjian — Tue, 19 Jan 2016 00:03:46 GMT

Hi All,

I know that we can have Multiple Concurrent SSL VPN Sessions with One Username but my question is how to disable this feature?

Thanks,
Amir

Re: How to disable Multiple Concurrent SSL VPN Sessions with One Username?

Remo — Tue, 19 Jan 2016 08:53:46 GMT

Unfortunately this is not possible at the moment. There should be an existing Feature Request for exactly this. Just ask your SE.

As a (ugly) workaround, you could implement a script which checks the logged in users regularly (every minute?) and automatically disconnects older sessions of users who are logged in multiple times.

Re: How to disable Multiple Concurrent SSL VPN Sessions with One Username?

Amir.Borjian — Fri, 22 Jan 2016 16:00:13 GMT

Thanks AXI_IIEN_Remo!

This is a big security issue!!

Re: How to disable Multiple Concurrent SSL VPN Sessions with One Username?

kiwi — Fri, 22 Jan 2016 16:21:41 GMT

Previous discussions + article on the topic :

Multiple-Concurrent-SSL-VPN-Sessions-with-One-Username

How-to-config-a-limit-for-each-SSL-VPN-account

As AXI_IIEN_Remo already pointed out there is an existing FR for this. Please reach out to your local SE and have him add extra weight to the request.

Cheers,

-Kim.

Re: How to disable Multiple Concurrent SSL VPN Sessions with One Username?

Raido_Rattameister — Mon, 25 Jan 2016 19:14:47 GMT

I would expect that it does not matter how many devices users have they could surf safely from all of them. If you are afraid that user/password will be stolen then use client side certificates.