Enhanced Security Measures in Place:   To ensure a safer experience, we’ve implemented additional, temporary security measures for all users.

idle timeout 0 not working?

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements

idle timeout 0 not working?

L2 Linker

We have a couple of machines that are set to display the PANOS web UI Dashboard so that we can see the current Risk Factor and System Resources, etc... so we set the Authentication Settings Idle Timeout to 0 so that the sessions do not time out, as indicated by the help.

However, they still do time out.  Is there something else we need to change?

We're running PANOS 4.1.4, but the problem also occured in 4.1.1.

7 REPLIES 7

L6 Presenter

How often did you set it to reload?

Because every time the dashboard reloads the auth session timeout should reset the countdown.

Could there perhaps be some other timeout in your browser causing these problems? For example how long is your ssl repository open for access as timeout?

It is set to refresh every minute, the default for the Dashboard.

I'm not sure about the SSL repository.  Where would I check that?  If it helps, the problem seems to occur both in Firefox 11.0 on Linux and IE 8 on Windows 7.

Have you tried setting the idle timeout to 10 minutes while having the page refresh every minute please.  Let us know if that works.

Thanks.

rmonvon wrote:

Have you tried setting the idle timeout to 10 minutes while having the page refresh every minute please.  Let us know if that works.

This did not work.  The browser sessions, even though they were on the Dashboard page and it was set to refresh each minute, still timed out.  This occured on IE 8 and FF 11 on LInux

It did seem to take far longer (hours) than 10 minutes to time out, however.  They seem to have timed out overnight.

It is possible that the browser itself is timing out.  You may want to do a pcap and see which side (PA device ot browser) is really terminating the session.

Have you consider using SNMP or the API to retrieve the stats that you need?  To me, it is a high security risk to leave the admin session active and accessible for extended period of time.

Regarding security risk...

Cant you limit an account to only view the dashboard (or similar) as a role?

KMacnaughton wrote:

rmonvon wrote:

Have you tried setting the idle timeout to 10 minutes while having the page refresh every minute please.  Let us know if that works.

This did not work.  The browser sessions, even though they were on the Dashboard page and it was set to refresh each minute, still timed out.  This occured on IE 8 and FF 11 on LInux

It did seem to take far longer (hours) than 10 minutes to time out, however.  They seem to have timed out overnight.

We upgraded to PAN-OS 4.1.5 last week and it seems to have corrected this part of the problem.  With idle-timeout=10m and Dashboard-refresh=1m, sessions stay logged on.

I've not tested if idle-timeout=0 works, but as another user pointed out, that's not a preferred approach.  We'd only tried =0 because the Dashboard-refresh wasn't keeping sessions alive.

  • 4146 Views
  • 7 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!