Cisco VPN Client Timeout

[JoergObermeier]

Hello,

we are using Cisco VPN Clients to connect to our Palo Alto Network Device, it works like a charm, but the user are logged out after one hour.

The timeout for  Login Lifetime is set to 30 day, and the Idle Timeout is set to 8 hours.

Any suggestion?

Jörg

[Steve1]

I am on Version 5.07 and I have the same issues. Global Protect clients receive the correct values. Cisco Clients will time out after 8 hours.

Is there a fix for this is or is this just another unsolved issue?

[bsimunko@recro-net.hr]

same problem on 6.1.2!

also, the split-tunnel configuration DOES NOT WORK! the tunnel always ends up being full-tunnel

[jvalentine]

I'm pretty sure that 3rd party IPSec clients only support full tunnel.  If you require split tunneling, you should use the GlobalProtect client. 

[bsimunko@recro-net.hr]

really? why is there no mention about this in any documents?

shame on you paloalto

[NGS_SOC]

Split tunnel on IPSEC is working but only if the networks are simpler enough. For examples if access routes are 192.168.0.0/24 and 172.16.0.0/24 this goes to full tunnel. Technical limitation probably will never fix.

Cisco IPSEC are stuck only to 8 hours and other IPSEC flavors (IPSEC on MacOSX) have even worst timeout.

[bsimunko@recro-net.hr]

what do you mean with "simpler networks"???

[NGS_SOC]

access route 192.168.0.0/24 is a simple one and goes to split tunnel

192.168.0.0/24 and 172.16.0.0/24 are more complex access routes and goes to tunnel everything