Watchguard SAML autoLogout after 8 Hours

masterofdebian

Hallo all,

I have a question.
We use Watchguard Mobile SSLVPN with MS SAML login. But all user will be automatic disconnected exactly after 8 Hours.
I found this Log in my dimension.

<?xml version:"1.0" encoding:"UTF-8"?> 3 1 236309 xxx@yyy.com 3 28800 180 SAML 4 3 3 0 0000000000000000 0000000000000000 2d80d3b825ee913a8483386b803498e4088b937e 1 0x0 122.231.34.22 0.0.0.0 SSLVPN-Users-SAML

28800 how can i edit this Timeout Value in Firebox?

BY the way: Firebox OS version is 12.11.1

Thanks a lot
Best Regards

masterofdebian

Bruce_Briggs

From the docs:

"Timeout settings specify when the Firebox disconnects users from the Access Portal. The Session Timeout setting indicates the maximum amount of time a user can remain connected to the Access Portal. The Idle Timeout setting indicates the maximum amount of time a user can be idle while connected to the Access Portal."

Configure the Access Portal
section: Configure the User Connection Settings
https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/Fireware/services/access portal/access_portal_config.html#Configur

james.carson

Hi @masterofdebian

I'd check the advanced options in your SSLVPN settings:

See:
(Manually Configure the Firebox for Mobile VPN with SSL)
https://www.watchguard.com/help/docs/help-center/en-us/Content/en-US/Fireware/mvpn/ssl/configure_fb_for_mvpn_ssl_c.html

I'm not sure what specific debug log that is -- that may not represent your rekey/reauth time.

masterofdebian

Hallo bruce,

But we haven't active the acces portal at all.

regards

masterofdebian

Hallo Bruce,

here is the screenshot.

thanks

masterofdebian

Hallo James,

here is the scrrenshot from advanced settings.
12 Hours is the value.

masterofdebian

Hallo James,

i found the log in dimension.

regards

masterofdebian

sess_timeout value is 28800