topic Re: Global Protect Agent captive portal Graceperiod timeout in General Topics

Global Protect Agent captive portal Graceperiod timeout

plevesque — Thu, 23 Mar 2017 15:24:46 GMT

Hello,

When the Enforce GlobalProtect Connection for Network Access feature is enabled, we can define a Gaceperiod to allow users to temporary connect through a captive portal ( hotel proxy...)

Maximum timeout, i can see is 3600 seconds (1 hour)...

Which mean that users have 1 hour to connect through the proxy after which the Network Access will simply be dropped.

Question : is it possible to have a unlimited graceperiod ?

In our senario, we are using 2 FA and if users do not authenticate within 1 hour ( which can happen if you go for a coffee break etc...) you will simply become stuck!

Any feedback/comments will be very helpful...

Thank you

PierrickL

Re: Global Protect Agent captive portal Graceperiod timeout

ansharma — Fri, 24 Mar 2017 05:38:10 GMT

1 hour is the maximum, I believe.

Re: Global Protect Agent captive portal Graceperiod timeout

plevesque — Fri, 24 Mar 2017 10:45:13 GMT

Hi,

Thanks ansharma,

i believe with 1 factor Auth this timeout value is not an issue but while using the second FA then it may become a problem..

Kind regards,

PierrickL