topic Re: "Disconnect on ideal" not working - Global protect in General Topics

"Disconnect on ideal" not working - Global protect

Jatin.Singh — Fri, 08 May 2020 07:37:51 GMT

We have set Disconnect on ideal for 20 min and we have tried to log off from the PC and login after 20 mins and GP is still connected,what could be the issue.

Inactivity logout seems to work after 2 hours

Palo version 8.1.13

GP- 5.1.1

Re: "Disconnect on ideal" not working - Global protect

OtakarKlier — Fri, 08 May 2020 13:44:08 GMT

Hello,

There is something that could be sending traffic over the VPN. Outlook and email programs are the usual culprit since they are always checking and sending traffic. Make sure there is nothing running that can send traffic or looking to update, i.e. Windows Update?

Hope that helps.

Re: "Disconnect on ideal" not working - Global protect

MP18 — Fri, 08 May 2020 14:20:24 GMT

Lets see what is causing this?

Re: "Disconnect on ideal" not working - Global protect

Jatin.Singh — Fri, 15 May 2020 02:47:56 GMT

@MP18 @OtakarKlier

Hi. We have done some troubleshooting on our end host PC and have found some TCP sessions that are continuously being created by our system and therefore sending traffic over the VPN Tunnel and keeping it alive.

The TCP sessions are created, and then they time out. Then another TCP session is established and also times out. We are not initiating this traffic and there are no other active processes that are trying to send traffic over the VPN.

Could you please see the attached screen shots and tell us how we can change this behavior so that we can effectively test the idle timeout settings on our Palo. If you require any other information, please let us know. Thanks

Also what exactly is the difference between Inactivity Logout and Disconnect on Idle?? Seem to be same