How to disable Multiple Concurrent SSL VPN Sessions with One Username?

[Amir.Borjian]

Hi All,

I know that we can have Multiple Concurrent SSL VPN Sessions with One Username but my question is how to disable this feature? 

Thanks,
Amir

[Remo]

Unfortunately this is not possible at the moment. There should be an existing Feature Request for exactly this. Just ask your SE.

As a (ugly) workaround, you could implement a script which checks the logged in users regularly (every minute?) and automatically disconnects older sessions of users who are logged in multiple times.

[Amir.Borjian]

Thanks AXI_IIEN_Remo!

This is a big security issue!!

[kiwi]

Previous discussions + article on the topic :

Multiple-Concurrent-SSL-VPN-Sessions-with-One-Username

How-to-config-a-limit-for-each-SSL-VPN-account

As AXI_IIEN_Remo already pointed out there is an existing FR for this.  Please reach out to your local SE and have him add extra weight to the request.

Cheers,

-Kim.

[Raido_Rattameister]

I would expect that it does not matter how many devices users have they could surf safely from all of them. If you are afraid that user/password will be stolen then use client side certificates.